CVE-2021-38396
6.5 MEDIUMThe programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive
Published: 2021-10-04 · Last updated: 2026-06-17
Severity and scoring
- CVSS
- 6.5 MEDIUM
- Vector
- CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
- CWE
- CWE-345, CWE-353
Affected products
| Vendor | Product |
|---|---|
| bostonscientific | zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware |
Description
The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB.
Source: NVD
References
Related CVEs
Same vendor
- CVE-2021-38400 — An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially craft... (6.9 MEDIUM)
- CVE-2021-38398 — The affected device uses off-the-shelf software components that contain unpatched vulnerabilities (6.5 MEDIUM)
- CVE-2021-38394 — An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which cou... (6.2 MEDIUM)
- CVE-2021-38392 — A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemet... (6.5 MEDIUM)
Same CWE
- CVE-2026-53862 — OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to reuse tokens with... (4.2 MEDIUM)
- CVE-2026-53900 — Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a mali... (4.3 MEDIUM)
- CVE-2026-53899 — Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to rece... (6.5 MEDIUM)
- CVE-2026-47777 — Mastodon is a free, open-source social network server based on ActivityPub (7.5 HIGH)
- CVE-2026-53406 — Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an au... (7.8 HIGH)