CVE-2020-27270
N/A
N/A
Summary
SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A | Dana DiabecareRS,AnyDana-i,AnyDana-A,versions prior to 3.0 | affected |
Weaknesses
- UNPROTECTED TRANSPORT OF CREDENTIALS CWE523
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.