CVE-2017-14014

Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Score

CVSS 3.0 4.6 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-01

Last modified

2024-09-16

Weaknesses

CWE-321, CWE-798

Affected products

• Zoom Latitude Prm (Boston Scientific)
• Zoom Latitude Prm 3120 Firmware (Bostonscientific)

References

• http://www.securityfocus.com/bid/101510
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01