Description (CNA)
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth Low Energy.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A | affected Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0 |
CWE
CWE-522
References
ADP enrichment
No English description supplied.