CVE-2020-27270 - CERT CVE
ID CVE-2020-27270
Sažetak SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).
Reference
CVSS
Base: 2.9
Impact: 2.9
Exploitability:5.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:A/AC:M/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje 23-01-2021 - 00:41
Objavljeno 19-01-2021 - 17:15