medium5.7
CVE-2020-27270
SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate me…
Impact
SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sooil | Anydana-A Firmware | before 3.0 |
| Sooil | Anydana-I Firmware | before 3.0 |
| Sooil | Diabecare Rs Firmware | before 3.0 |