QSearchQSearch

CVE-2021-38400

6.9 MEDIUM

An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially craft...

Published: 2021-10-04 · Last updated: 2026-06-17

Severity and scoring

CVSS
6.9 MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L
CWE
CWE-916

Affected products

VendorProduct
bostonscientificzoom_latitude_pogrammer\/recorder\/monitor_3120_firmware

Description

An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially crafted USB to extract the password hash for brute force reverse engineering of the system password.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2021-38398 — The affected device uses off-the-shelf software components that contain unpatched vulnerabilities (6.5 MEDIUM)
  • CVE-2021-38396 — The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive (6.5 MEDIUM)
  • CVE-2021-38394 — An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which cou... (6.2 MEDIUM)
  • CVE-2021-38392 — A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemet... (6.5 MEDIUM)

Same CWE

  • CVE-2026-9641 — Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations (5.3 MEDIUM)
  • CVE-2026-25861 — QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise... (5.9 MEDIUM)
  • CVE-2026-44611 — Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brut... (5.4 MEDIUM)
  • CVE-2026-45787 — electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client (9.1 CRITICAL)
  • CVE-2026-45027 — WeGIA is a web manager for charitable institutions (5.9 MEDIUM)