Description
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A | Dana Diabecare RS, AnyDana-i, AnyDana-A All versions prior to 3.0 | — |
Advisories 1
- ICSMA-21-012-01 SOOIL Dana Diabecare RS Products CISA ICS & IT advisories · Jan 12, 2021