CVE-2021-38400 : What You Need to Know

This CVE-2021-38400 article provides details about the vulnerability relating to the use of password hash with insufficient computational effort for Boston Scientific Zoom Latitude.

Understanding CVE-2021-38400

This section delves into the specifics of the CVE-2021-38400 vulnerability.

What is CVE-2021-38400?

The vulnerability involves an attacker with physical access to Boston Scientific Zoom Latitude Model 3120 extracting the password hash for brute force reverse engineering of the system password.

The Impact of CVE-2021-38400

The impact of this vulnerability is categorized as medium severity, with high confidentiality and integrity impacts, requiring user interaction for exploitation.

Technical Details of CVE-2021-38400

Exploring the technical aspects of the vulnerability in depth.

Vulnerability Description

The attacker can remove the hard disk drive or create a specially crafted USB to extract the password hash for reverse engineering of the system password.

Affected Systems and Versions

Product: ZOOM LATITUDE
Vendor: Boston Scientific
Affected Version: Model 3120

Exploitation Mechanism

Attack Complexity: High
Attack Vector: Physical
Privileges Required: None
Scope: Changed
User Interaction: Required
Exploitation Impact: Low

Mitigation and Prevention

Guidelines for mitigating and preventing the CVE-2021-38400 vulnerability.

Immediate Steps to Take

Boston Scientific transitioning to a replacement programmer Model 3300 with enhanced security.

Long-Term Security Practices

Ensure physical security to prevent unauthorized access.
Implement strong password policies and encryption practices.

Patching and Updates

Boston Scientific will not issue a product update for ZOOM LATITUDE Programming System, Model 3120.