Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-46447
HistoryJan 20, 2024 - 12:00 a.m.

CVE-2023-46447

2024-01-2000:00:00
ubuntu.com
ubuntu.com
17
pops! rebel
android
unencrypted
glucose measurements
ble

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

17.1%

The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth
Glucose Monitoring System, sends unencrypted glucose measurements over BLE.

Notes

Author Note
mdeslaur This CVE was mentioned in the terrapin-attack.com advisory as affecting AsyncSSH, but the CVE number was a typo. This CVE does not affect AsyncSSH.

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

17.1%