CVE-2020-27270

MEDIUM

5.7

Beschreibung

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).

CVE Details

CVSS v3.1 Bewertung5.7

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AngriffsvektorADJACENT_NETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht1/19/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

sooil:anydana-asooil:anydana-a_firmwaresooil:anydana-isooil:anydana-i_firmwaresooil:diabecare_rssooil:diabecare_rs_firmware

Schwachen (CWE)

CWE-522

Referenzen

https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01(ics-cert@hq.dhs.gov)

https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.