CVE-2021-38392
Improper Access Control for Boston Scientific Zoom Latitude
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Oct 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemetry region and could use this setting to interrogate or program an implantable device in any region in the world.
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
Affected products
Boston Scientific · ZOOM LATITUDEWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →