Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Sooil Component: Anydana-a Firmware Clear all filters
TI-2020-16595 CVE-2020-27269 · GHSA-5pr6-w68j-vgj8

Authentication bypass by capture-replay in SOOIL Developments Co., Ltd Diabecare RS…

Priority LOW 26

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unau…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00506 Published 2021-01-19 No fix listed CWE-294
TI-2020-16594 CVE-2020-27268 · GHSA-cfx3-m5fr-8c98

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side…

Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to b…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00546 Published 2021-01-19 No fix listed CWE-602
TI-2020-16592 CVE-2020-27266 · GHSA-4v4q-53h2-r6mj

Improper authentication in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and…

Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to b…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00588 Published 2021-01-19 No fix listed CWE-603
TI-2020-16590 CVE-2020-27264 · GHSA-w9vx-9mgg-m33x

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication…

Priority LOW 39

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticate…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00547 Published 2021-01-19 No fix listed CWE-330
TI-2020-16582 CVE-2020-27256 · GHSA-8v8f-rjrw-vg47

Hard-coded credentials in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and…

Priority LOW 30

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00315 Published 2021-01-19 No fix listed CWE-798
TI-2020-16600 CVE-2020-27276 · GHSA-hpq4-rvv8-g82j

Authentication bypass by spoofing in SOOIL Developments CoLtd…

Priority LOW 26

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entiti…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.0051 Published 2021-01-19 No fix listed CWE-290
TI-2020-16597 CVE-2020-27272 · GHSA-cx47-rr8x-3gw5

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of…

Priority LOW 26

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00474 Published 2021-01-19 No fix listed
TI-2020-16596 CVE-2020-27270 · GHSA-6gr4-mx2p-46wq

Insufficiently protected credentials in SOOIL Developments CoLtd…

Priority LOW 25

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows una…

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00265 Published 2021-01-19 No fix listed CWE-522