PT-2016-6236
CVE-2016-5085
·
تاريخ النشر
2016-10-05
·
تاريخ التحديث
2016-12-24
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions
Johnson & Johnson Animas OneTouch Ping devices (affected versions not specified)
Description
The issue concerns the generation of random numbers in the devices, making it easier for remote attackers to spoof meters. This can be achieved by sniffing the network and then engaging in an authentication handshake.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾