CVE-2020-27272

5.7 mediumEPSS 0.5%

Medium (5.7) in sooil. EPSS 0.5% chance of exploitation in the next 30 days.

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the keys and spoof the pump via BLE.

Severity

CVSS 3.1

5.7 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
Published: 2021-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sooil:anydana-a_firmware
sooil:anydana-i_firmware
sooil:diabecare_rs_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01

Check your stack JSON