Medium severity6.9NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026

CVE-2021-38400

Description

An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially crafted USB to extract the password hash for brute force reverse engineering of the system password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Boston Scientific/Zoom Latitude Model 3120llm-fuzzy
Boston Scientific/ZOOM LATITUDE PRMcpe-rescue
Range: Model 3120

Patches

Vulnerability mechanics

References

us-cert.cisa.gov/ics/advisories/icsma-21-273-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

Severity

MediumCVSS v3.1

6.9/ 10

Attack vector: Physical
Complexity: High
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: High
Integrity: High
Availability: Low

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L

EPSS

Probability of exploitation in the next 30 days.

0.14%

VYPR risk score

Composite of severity, exploitation, and reach.

0.45medium

cvss	0.449
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

No CWEs mapped.

CVE ID

CVE-2021-38400

Credits

EP
Endres Puschner - Max Planck Institute for Security and Privacy, Bochum, Christoph Saatjohann - FH Münster University of Applied Sciences, Christian Dresen - FH Münster University of Applied Sciences, and Markus Willing - University of Muenster, discovered these issues as part of broader academic research of cardiac devices and reported them to Boston Scientific.
finder