Read the docs

Sooil

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sooil records in CISA KEV

No Sooil vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

9 records

Priority LOW 39

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticate…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00547 Published 2021-01-19 No fix listed CWE-330
Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to b…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00546 Published 2021-01-19 No fix listed CWE-602
Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to b…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00588 Published 2021-01-19 No fix listed CWE-603
Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows u…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00582 Published 2021-01-19 No fix listed CWE-522
Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00315 Published 2021-01-19 No fix listed CWE-798
Priority LOW 26

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entiti…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.0051 Published 2021-01-19 No fix listed CWE-290
Priority LOW 26

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00474 Published 2021-01-19 No fix listed
Priority LOW 26

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unau…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00506 Published 2021-01-19 No fix listed CWE-294
Priority LOW 25

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows una…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00265 Published 2021-01-19 No fix listed CWE-522
Open these records in search →