CVE-2020-27264 - In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy

Back Back to CVE browser

HIGH

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy

Published Jan 19, 2021

8.8

HIGH

CVSS 3.1

EPSS 0.54%

Description

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy.

Affected products

Vendor n/a Product SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Default
n/a
- Version
  Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A

n/a

Version	Status	Constraints
Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-330

Insufficient Randomness

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19777
Advisory
https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19777		Advisory
https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01		x_refsource_MISCThird Party AdvisoryUS Government Resource