Lucene search

K
cvelistIcscertCVELIST:CVE-2020-27258
HistoryJan 19, 2021 - 8:46 p.m.

CVE-2020-27258

2021-01-1920:46:40
CWE-522
icscert
www.cve.org
4
sooil developments co.
diabecare rs
anydana-i
anydana-a
information disclosure
communication protocol
insulin pump
unauthenticated attackers
bluetooth low energy
keypad lock pin

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

38.7%

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth Low Energy.

CNA Affected

[
  {
    "product": "SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Dana Diabecare RS, AnyDana-i, AnyDana-A  All versions prior to 3.0"
      }
    ]
  }
]

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

38.7%

Related for CVELIST:CVE-2020-27258