CVE-2020-27264CWE-330

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile…

published January 19, 2021

CVSS
—
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.0th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2021-01-19T20:46Z
EPSS history
Timeline
  • 19 JAN 20:46Z
    In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile…
    cvelistv5