Medium severity6.5NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026

CVE-2021-38398

Description

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Boston Scientific/ZOOM LATITUDE PRMcpe-rescue
Range: Model 3120

Patches

Vulnerability mechanics

References

us-cert.cisa.gov/ics/advisories/icsma-21-273-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

Severity

MediumCVSS v3.1

6.5/ 10

Attack vector: Physical
Complexity: Low
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: High
Availability: Low

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

EPSS

Probability of exploitation in the next 30 days.

0.40%

VYPR risk score

Composite of severity, exploitation, and reach.

0.42medium

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

No CWEs mapped.

CVE ID

CVE-2021-38398

Credits

EP
Endres Puschner - Max Planck Institute for Security and Privacy, Bochum, Christoph Saatjohann - FH Münster University of Applied Sciences, Christian Dresen - FH Münster University of Applied Sciences, and Markus Willing - University of Muenster, discovered these issues as part of broader academic research of cardiac devices and reported them to Boston Scientific.
finder