Information disclosure

2021-01-1921:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth Low Energy.

CPENameOperatorVersion
anydana-alt3.0
anydana-ilt3.0
dana_diabecare_rs_firmwarelt3.0

Name	Operator	Version
anydana-a	lt	3.0
anydana-i	lt	3.0
dana_diabecare_rs_firmware	lt	3.0

References

us-cert.cisa.gov/ics/advisories/icsma-21-012-01