CVE-2021-38396
04.10.2021, 18:15
The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB.Enginsight
| Vendor | Product | Version |
|---|---|---|
| bostonscientific | zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-353 - Missing Support for Integrity CheckThe software uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.
- CWE-345 - Insufficient Verification of Data AuthenticityThe software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.