bostonscientific records

7 published records for vendor bostonscientific.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2021-38392No exploit	Improper Access Control for Boston Scientific Zoom Latitudebostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmware · CWE-284 Broken access control (IDOR)	High7.6	—	0.2%	Oct 4, 2021
27Monitor	CVE-2021-38398No exploit	Reliance on Component that is not Updateable for Boston Scientific Zoom Latitudebostonscientific · zoom latitude programming system model 3120 firmware · CWE-1329	Medium6.8	—	0.4%	Oct 4, 2021
27Monitor	CVE-2021-38396No exploit	Missing Support Integrity Check for Boston Scientific Zoom Latitudebostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmware · CWE-353	Medium6.8	—	0.1%	Oct 4, 2021
27Monitor	CVE-2021-38400No exploit	Use of Password Hash with Insufficient Computational Effort for Boston Scientific Zoom Latitudebostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmware · CWE-916	Medium6.8	—	0.1%	Oct 4, 2021
25Monitor	CVE-2021-38394No exploit	Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitudebostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmware · CWE-1278	Medium6.4	—	0.2%	Oct 4, 2021
18Monitor	CVE-2017-14014No exploit	Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removablbostonscientific · zoom latitude prm 3120 firmware · CWE-321 Hard-coded credentials	Medium4.6	—	0.3%	May 1, 2018
18Monitor	CVE-2017-14012No exploit	Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest.bostonscientific · zoom latitude prm 3120 firmware · CWE-311	Medium4.6	—	0.2%	May 1, 2018

CVE-2021-38392
30Monitor
Improper Access Control for Boston Scientific Zoom Latitude
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
bostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmwareOct 4, 2021
CVE-2021-38398
27Monitor
Reliance on Component that is not Updateable for Boston Scientific Zoom Latitude
MediumCVSS 6.8No exploitEPSS 0%
bostonscientific · zoom latitude programming system model 3120 firmwareOct 4, 2021
CVE-2021-38396
27Monitor
Missing Support Integrity Check for Boston Scientific Zoom Latitude
MediumCVSS 6.8No exploitEPSS 0%
bostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmwareOct 4, 2021
CVE-2021-38400
27Monitor
Use of Password Hash with Insufficient Computational Effort for Boston Scientific Zoom Latitude
MediumCVSS 6.8No exploitEPSS 0%
bostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmwareOct 4, 2021
CVE-2021-38394
25Monitor
Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude
MediumCVSS 6.4No exploitEPSS 0%
bostonscientific · zoom latitude pogrammer\/recorder\/monitor 3120 firmwareOct 4, 2021
CVE-2017-14014
18Monitor
Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removabl
MediumCVSS 4.6No exploitEPSS 0%
- Hard-coded credentials
bostonscientific · zoom latitude prm 3120 firmwareMay 1, 2018
CVE-2017-14012
18Monitor
Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest.
MediumCVSS 4.6No exploitEPSS 0%
bostonscientific · zoom latitude prm 3120 firmwareMay 1, 2018