Description (CNA)
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A | affected Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0 |
CWE
CWE-330
References
ADP enrichment
No English description supplied.