CVE-2020-27256

2021-01-1920:46:30

CWE-798

icscert

www.cve.org

sooil developments co. diabecare rs anydana-i anydana-a insulin pump pin attack

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

29.5%

JSON

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings.

CNA Affected

[
  {
    "product": "SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Dana Diabecare RS, AnyDana-i, AnyDana-A  All versions prior to 3.0"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsma-21-012-01