SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn’t use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the keys and spoof the pump via BLE.
CPE | Name | Operator | Version |
---|---|---|---|
anydana-a_firmware | lt | 3.0 | |
anydana-i_firmware | lt | 3.0 | |
diabecare_rs_firmware | lt | 3.0 |