← volver
CVE-2021-38394

Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude

CVSS 6.2 MEDIUMEPSS 0.2%CWE-1278
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.2EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
04 oct 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →