Description
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A | Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0 | — |
Advisories 1
- ICSMA-21-012-01 SOOIL Dana Diabecare RS Products CISA ICS & IT advisories · Jan 12, 2021