CVE-2020-27258

MEDIUM 6.5CVE-2020-27258 · Published 19/01/2021 · updated 17/06/2026

In short

CVE-2020-27258 is a MEDIUM (CVSS 6.5) vulnerability affecting anydana-a (sooil), anydana-i (sooil).
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 48.1% of all vulnerabilities.
Fix: update to 3.0 or later.

Package	Affected versions	Patched versions
anydana-a sooil	`< 3.0`	`3.0`
anydana-i sooil	`< 3.0`	`3.0`

Description

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth Low Energy.

References

us-cert.cisa.gov/ics/advisories/icsma-21-012-01 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free