Authentication flaw

2021-01-1917:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn’t use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the authentication sequence via Bluetooth Low Energy.

CPENameOperatorVersion
anydana-a_firmwarelt3.0
anydana-i_firmwarelt3.0
diabecare_rs_firmwarelt3.0

Name	Operator	Version
anydana-a_firmware	lt	3.0
anydana-i_firmware	lt	3.0
diabecare_rs_firmware	lt	3.0

References

us-cert.cisa.gov/ics/advisories/icsma-21-012-01