CVE-2021-38394
—CVSS 3.1
6.4 medium
EPSS
<1%p14
Published
()
Modified
Description
An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.
- Vendors
- bostonscientific
- Products
- zoom latitude pogrammer\/recorder\/monitor 3120 firmware
- Weakness
- CWE-1278
- Vector
- CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.