Sustainability at Akamai: An Efficient Platform Powered by Energy Aggregation

If I had a dollar for every time I heard “unprecedented” in 2020, I could fund a clean energy project myself. And while we're tired of hearing this term, it's true amid the pandemic, U.S. presidential election, social justice movements, finalization of Brexit, and many other new and life-changing...

Denial of Service Vulnerability in the DF9312-DTU

Oriental Electronics has developed into a large-scale high-tech enterprise integrating scientific research and development, production and operation, technical service and system integration, and is one of the main suppliers of energy management system solutions in China. A denial of service...

Lumax Classic suffers from dll hijacking vulnerability (CNVD-2021-09953)

LU Master is a well-known free system tool software in China, providing free hardware authenticity identification, stability guarantee, system performance improvement, LU Master has hardware detection, hardware testing, system optimization, energy saving and cooling, driver installation, driver a...

Hackers Accidentally Expose Passwords Stolen From Businesses On the Internet

A new large-scale phishing campaign targeting global organizations has been found to bypass Microsoft Office 365 Advanced Threat Protection ATP and steal credentials belonging to over a thousand corporate employees. The cyber offensive is said to have originated in August last year, with the...

SQL Injection Vulnerability in Energy Information Management System of Chongqing Jutai Internet of Things Group Limited (CNVD-2021-10513)

Chongqing Jutai Internet of Things Group Co., Ltd. is a company engaged in the research and development, production, and sales/computer system integration of hardware and software for Internet of Things products. A SQL injection vulnerability exists in the energy information management system of...

Unauthorized Access Vulnerability in Energy Information Management System of Chongqing Jutai Internet of Things Group Limited (CNVD-2021-10512)

Chongqing Jutai Internet of Things Group Co., Ltd. is a company engaged in the research and development, production, and sales/computer system integration of hardware and software for Internet of Things products. An unauthorized access vulnerability exists in the energy information management...

CVE-2020-27268

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy...

CVE-2020-27266

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy...

CVE-2020-27269

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences...

CVE-2020-27269

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences...

CVE-2020-27266

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy...

CVE-2020-27268

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy...

Design/Logic Flaw

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy...

Code injection

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences...

Design/Logic Flaw

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy...

CVE-2020-27269

CVE-2020-27269 affects Dana Diabecare RS, AnyDana-i, and AnyDana-A insulin pumps and their mobile apps. The root cause is the absence of replay protection in the Bluetooth Low Energy communication protocol, enabling unauthenticated, physically proximate attackers to replay legitimate sequences. P...

CVE-2020-27268

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy...

CVE-2020-27268

The CVE-2020-27268 entry concerns a client-side control vulnerability in SOOIL Dana Diabecare RS insulin pump and its AnyDana-i/AnyDana-A mobile apps. The issue allows physically proximate attackers to bypass authentication checks for default PINs via Bluetooth Low Energy , enabling potential una...

CVE-2020-27266

CVE-2020-27266 affects Dana Diabecare RS, AnyDana-i and AnyDana-A insulin pumps and companion mobile apps. Description and connected advisories confirm a client-side control vulnerability that enables physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy, po...

CVE-2020-27266

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy...