CVE-2021-38394

Katalog CVE

CVSS 6.4 · Medium EPSS 0,23%

Kerentanan Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques pada bostonscientific zoom latitude pogrammer/recorder/monitor 3120 firmware. Skor CVSS 3.1 6.4 (Medium) menurut NVD.

Deskripsi (NVD)

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

Rincian

Terbit di NVD

4 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.4 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1278: Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 13,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 advisory pihak ketiga · pemerintah AS