Description
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth Low Energy.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A | Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0 | — |
Advisories 1
- ICSMA-21-012-01 SOOIL Dana Diabecare RS Products CISA ICS & IT advisories · Jan 12, 2021