CVE-2016-5084

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.

Ссылки

http://www.kb.cert.org/vuls/id/884840
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
Mitigation
Technical Description
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-16-279-01
http://www.kb.cert.org/vuls/id/884840
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
Mitigation
Technical Description
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-16-279-01

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:animas:onetouch_ping_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:animas:onetouch_ping:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01236

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-j2v3-wwrj-4h89