exploitDog

CVE-2016-5086

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 9.3

EPSS Низкий

Описание

Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.

Ссылки

http://www.kb.cert.org/vuls/id/884840
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
Mitigation
Technical Description
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-16-279-01
http://www.kb.cert.org/vuls/id/884840
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
Mitigation
Technical Description
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-16-279-01

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:animas:onetouch_ping_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:animas:onetouch_ping:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03014

Низкий

9.8 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-3f5r-8cpv-jgc3

CVSS3: 9.8

github

больше 3 лет назад

Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.

EPSS

Процентиль: 86%

0.03014

Низкий

9.8 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-287