Description
SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A | Dana DiabecareRS,AnyDana-i,AnyDana-A,versions prior to 3.0 | — |
Advisories 1
- ICSMA-21-012-01 SOOIL Dana Diabecare RS Products CISA ICS & IT advisories · Jan 12, 2021