CVE-2020-27268
19.01.2021, 22:15
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sooil | anydana-a_firmware | 𝑥 < 3.0 |
| sooil | anydana-i_firmware | 𝑥 < 3.0 |
| sooil | diabecare_rs_firmware | 𝑥 < 3.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-602 - Client-Side Enforcement of Server-Side SecurityThe product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
- CWE-669 - Incorrect Resource Transfer Between SpheresThe product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.