CVE-2020-27270

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via BLE...

CVE-2020-27272

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop t...

CVE-2020-27276

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate...

CVE-2020-27276

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate...

CVE-2020-27276

CVE-2020-27276 affects SOOIL Dana Diabecare insulin pumps and related AnyDana-i/AnyDana-A apps. The Connected Health disclosures enumerate multiple related flaws in the BLE-based protocol, including key exchange without entity authentication and replay/credential handling weaknesses (CWE-322, CWE...

CVE-2020-27270

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via BLE...

CVE-2020-27270

CVE-2020-27270 affects Dana Diabecare insulin pumps and the AnyDana-i/AnyDana-A mobile apps. The vulnerability arises from unprotected encryption keys in transit over Bluetooth Low Energy, enabling unauthenticated, physically proximate attackers to sniff keys. Affected products include Dana Diabe...

CVE-2020-27270: Insufficiently Protected Credentials

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via BLE...

PT-2021-11357

Name of the Vulnerable Software and Affected Versions: DiabecareRS, AnyDana-i, AnyDana-A affected versions not specified Description: The communication protocol of the insulin pump and AnyDana-i, AnyDana-A mobile apps does not use adequate measures to authenticate the pump before exchanging keys...

CVE-2020-27276: Authentication Bypass by Spoofing

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate...

PT-2021-11356

Name of the Vulnerable Software and Affected Versions: SOOIL Developments Co., Ltd DiabecareRS, AnyDana-i, AnyDana-A affected versions not specified Description: The communication protocol of the insulin pump and AnyDana-i, AnyDana-A mobile apps does not use adequate measures to protect encryptio...

PT-2021-11360

Name of the Vulnerable Software and Affected Versions: SOOIL Developments Co Ltd DiabecareRS, AnyDana-i & AnyDana-A affected versions not specified Description: The communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps does not use adequate measures to authenticate...

CVE-2020-27272: Undefined Security Weakness

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop t...