Boston Scientific ZOOM LATITUDE PRM Routers Multiple Security Vulnerabilities

Bugtraq ID:	101510
Class:	Input Validation Error
CVE:	CVE-2017-14012 CVE-2017-14014
Remote:	No
Local:	Yes
Published:	Oct 19 2017 12:00AM
Updated:	Oct 19 2017 12:00AM
Credit:	Jonathan Butts and Billy Rios of Whitescope.
Vulnerable:	Boston Scientific ZOOM LATITUDE PRM 1320 0
Not Vulnerable:

Boston Scientific ZOOM LATITUDE PRM Routers Multiple Security Vulnerabilities

Boston Scientific ZOOM LATITUDE PRM are prone to the following security vulnerabilities:

1. A hard-coded encryption information-disclosure vulnerability
2. An information-disclosure vulnerability

Attackers can exploit these issues to obtain potentially sensitive information. Information obtained may aid in further attacks.

Boston Scientific ZOOM LATITUDE PRM Routers Multiple Security Vulnerabilities

Attackers can use readily available tools to exploit these issues.

Boston Scientific ZOOM LATITUDE PRM Routers Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Boston Scientific ZOOM LATITUDE PRM Routers Multiple Security Vulnerabilities

References:

• Boston Scientific Homepage (Boston Scientific)
  
• ICSMA-17-292-01:Boston Scientific ZOOM LATITUDE PRM Vulnerabilities (CERT)