Overview
- Description
- In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences via Bluetooth Low Energy.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.7
- Impact score
- 3.6
- Exploitability score
- 2.1
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 2.9
- Impact score
- 2.9
- Exploitability score
- 5.5
- Vector string
- AV:A/AC:M/Au:N/C:P/I:N/A:N
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sooil:anydana-a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "808DBA89-C2C2-4C03-814D-DB0B4DFF8B22",
"versionEndExcluding": "3.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sooil:anydana-a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2624582E-762F-4CDB-B974-1BC971F1544D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sooil:anydana-i_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98E25B7D-C1ED-4144-8411-171C7B6426E4",
"versionEndExcluding": "3.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sooil:anydana-i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E25CB863-07D9-4E90-8022-6C2B4C52EDFC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sooil:diabecare_rs_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5C154F1-7F29-4EC0-9971-76A02C6DA8BC",
"versionEndExcluding": "3.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sooil:diabecare_rs:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8628A530-AF34-453E-968A-40DD5B8EE456"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]