CVE-2020-27258

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth...

PT-2021-11349

Name of the Vulnerable Software and Affected Versions: SOOIL Developments Co., Ltd Diabecare RS affected versions not specified AnyDana-i affected versions not specified AnyDana-A affected versions not specified Description: An information disclosure issue in the communication protocol of the...

Multiple Sooil Product Information Disclosure Vulnerabilities

Sooil Dana Diabecare RS and others are products of Sooil Corporation, South Korea.Sooil Dana Diabecare RS is a smart insulin pump with a discrete remote control for medical use.Sooil Anydana-i is a mobile application that can be used to control the Sooil Dana Diabecare RS.Sooil Anydana-i is a...

SOOIL Dana Diabecare RS Products

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: SOOIL Developments Co., Ltd. Equipment: Diabecare RS, AnyDana-i and AnyDana-A Vulnerabilities: Use of Hard Coded Credentials, Insufficiently Protected Credentials, Use of Insufficiently Random...

Linux kernel iowarrior DoS

The vulnerability of the driver/misc/iowarrior.ko module in the Linux operating system is related to a memory leak in the implementation of the omap4keypadprobe handler. Exploiting this vulnerability can allow an attacker to cause a service failure by connecting an OMAP4 Keypad device that does n...

PT-2020-22869

Уязвимость загружаемого модуля drivers/usb/misc/iowarrior.ko ядра операционной системы Linux связана с утечкой памяти в реализации обработчика omap4 keypad probe. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании, путем подключения устройства OMAP4 Keypad, которое не...

SimpliSafe SS3 Authorization Issue Vulnerability (CNVD-2020-31746)

SimpliSafe SS3 is a home security solution from SimpliSafe USA. An authorization issue vulnerability exists in SimpliSafe SS3 using firmware version 1.4, which can be exploited by a local attacker to connect a malicious keypad to a system with an alarm turned on...

CVE-2020-5727

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

CVE-2020-5727

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

CVE-2020-5727

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

CVE-2020-5727

CVE-2020-5727 affects SimpliSafe SS3 with firmware version 1.4. The issue is an authentication bypass via an alternate path/channel that lets a local, unauthenticated attacker pair a rogue keypad to an armed system. The publicly available documents confirm the vulnerability details but do not pro...

CVE-2020-5727

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

CVE-2020-5727: Improper Authentication

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

PT-2020-18650

Name of the Vulnerable Software and Affected Versions SimpliSafe SS3 firmware version 1.4 Description The issue allows a local, unauthenticated attacker to bypass authentication using an alternate path or channel, enabling them to pair a rogue keypad to an armed system. Recommendations For...

CVE-2019-10608

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

Information disclosure

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

CVE-2019-10608

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

PT-2020-9104

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description An information disclosure issue occurs due to the lack of binding between the secure keypad session and the secure display session. This allows a user to take control of...

CVE-2019-10608: Undefined Security Weakness

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

SimpliSafe SS3 Authentication Bypass Vulnerability

SimpliSafe SS3 is a home security solution from SimpliSafe USA. A security vulnerability exists in the SimpliSafe SS3 using firmware versions 1.0 through 1.3. An attacker could use the vulnerability to bypass authentication and connect a malicious keypad pair to the alarm system...