CVE-2020-27276

Name of the Vulnerable Software and Affected Versions: SOOIL Developments Co Ltd DiabecareRS, AnyDana-i & AnyDana-A (affected versions not specified)

Description: The communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps does not use adequate measures to authenticate the communicating entities before exchanging keys. This allows unauthenticated, physically proximate attackers to eavesdrop the authentication sequence via Bluetooth Low Energy.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.