CVE-2020-27269
5.7MEDIUMIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measure
Published: 1/19/2021Updated: 11/21/2024
Description
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences via Bluetooth Low Energy.
AI AnalysisPowered by AI
Affected Products
sooilanydana-a_firmware
sooilanydana-a
-
sooilanydana-i_firmware
sooilanydana-i
-
sooildiabecare_rs_firmware
sooildiabecare_rs
-
References
- https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01Third Party AdvisoryUS Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01Third Party AdvisoryUS Government Resource