Boston Scientific Zoom Latitude

Risk Summary

Successful exploitation of these vulnerabilities may allow an attacker with physical access to the affected device to obtain patient protected health information (PHI), and/or compromise the integrity of the device. The affected device is not network connected and does not contain hardware to be network connected.

CVEs (5)

Remediations

• Boston Scientific is in the process of transitioning all users to a replacement programmer with enhanced security, the LATITUDE Programming System, Model 3300. Boston Scientific will not issue a product update to address the identified vulnerabilities in the ZOOM LATITUDE Programming System, Model 3120.
• To reduce the risk of exploitation, Boston Scientific recommends those still utilizing the ZOOM LATITUDE PRM Model 3120 implement the following measures:

Affected Vendors

Affected Products (1)

Affected Sectors

Healthcare and Public Health