Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xjhq-mcqp-qfx3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The affected insulin pump is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.

The affected insulin pump is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.

EPSS

Процентиль: 37%
0.00156
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.1
nvd
почти 6 лет назад

Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.

EPSS

Процентиль: 37%
0.00156
Низкий

Дефекты

CWE-125