medium6.5
CVE-2021-38396
The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive.
Impact
The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bostonscientific | Zoom Latitude Pogrammer\/Recorder\/Monitor 3120 Firmware | All versions |