Lucene search

K
SooilAnydana-i Firmware

4 matches found

CVE
CVE
added 2021/01/19 5:15 p.m.47 views

CVE-2020-27276

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate a...

5.7CVSS5.3AI score0.00078EPSS
CVE
CVE
added 2021/01/19 10:15 p.m.40 views

CVE-2020-27269

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences v...

5.7CVSS5.6AI score0.00089EPSS
CVE
CVE
added 2021/01/19 5:15 p.m.37 views

CVE-2020-27272

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the...

5.7CVSS5.1AI score0.00094EPSS
CVE
CVE
added 2021/01/19 5:15 p.m.29 views

CVE-2020-27270

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).

5.7CVSS5.1AI score0.00048EPSS