PT-2021-11356
CVE-2020-27270
·
تاريخ النشر
2021-01-19
·
تاريخ التحديث
2021-01-23
الوصف من
CVSS 3.1
5.7
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
SOOIL Developments Co., Ltd DiabecareRS, AnyDana-i, AnyDana-A (affected versions not specified)
Description:
The communication protocol of the insulin pump and AnyDana-i, AnyDana-A mobile apps does not use adequate measures to protect encryption keys in transit. This allows an unauthenticated, physically proximate attacker to sniff keys via Bluetooth Low Energy (BLE).
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾