CVE-2021-38398

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities.
References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:bostonscientific:zoom_latitude_programming_system_model_3120_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:bostonscientific:zoom_latitude_programming_system_model_3120:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120:-:*:*:*:*:*:*:*

History

12 May 2022, 01:01

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-1329

13 Oct 2021, 19:17

Type Values Removed Values Added
CWE NVD-CWE-Other
References (MISC) https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 - (MISC) https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 - Third Party Advisory, US Government Resource
CVSS v2 : unknown
v3 : unknown
v2 : 4.6
v3 : 6.8
CPE cpe:2.3:h:bostonscientific:zoom_latitude_programming_system_model_3120:-:*:*:*:*:*:*:*
cpe:2.3:o:bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120:-:*:*:*:*:*:*:*
cpe:2.3:o:bostonscientific:zoom_latitude_programming_system_model_3120_firmware:-:*:*:*:*:*:*:*

04 Oct 2021, 18:18

Type Values Removed Values Added
New CVE

Information

Published : 2021-10-04 18:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-38398

Mitre link : CVE-2021-38398

CVE.ORG link : CVE-2021-38398


JSON object : View

Products Affected

bostonscientific

  • zoom_latitude_programming_system_model_3120
  • zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware
  • zoom_latitude_programming_system_model_3120_firmware
  • zoom_latitude_pogrammer\/recorder\/monitor_3120
CWE
CWE-1329

Reliance on Component That is Not Updateable

NVD-CWE-Other