Skip to main content

Zoom Latitude Pogrammer Recorder Monitor 3120 Firmware CVE-2021-38396

MEDIUM
Missing Support for Integrity Check (CWE-353)
2021-10-04 ics-cert@hq.dhs.gov
Authentication Bypass Zoom Latitude Pogrammer Recorder Monitor 3120 Firmware
6.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Oct 04, 2021 - 18:15 nvd
MEDIUM 6.8

DescriptionNVD

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB.

AnalysisAI

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-353. The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB. Affected products include: Bostonscientific Zoom Latitude Pogrammer\/Recorder\/Monitor 3120 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Zoom Latitude Pogrammer Recorder Monitor 3120 Firmware

View all
CVE-2021-38392 HIGH
7.6 Oct 04

A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to c
CVE-2021-38400 MEDIUM
6.8 Oct 04

An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create

CVE-2021-38398 MEDIUM
6.8 Oct 04

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. Rated medium severity
CVE-2021-38394 MEDIUM
6.4 Oct 04

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engin

Same weakness CWE-353 – Missing Support for Integrity Check

View all
CVE-2024-46917 HIGH POC
8.1
CVE-2021-26608 CRITICAL
9.8
CVE-2025-32890 MEDIUM POC
5.3
CVE-2026-48995 MEDIUM POC
4.8
CVE-2021-26610 HIGH
8.8
CVE-2020-7810 HIGH
8.8
CVE-2026-7574 HIGH
8.7
CVE-2021-28545 HIGH
8.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2021-38396 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy