CVE-2016-5686

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 9.3

EPSS Низкий

Описание

Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.

Ссылки

http://www.kb.cert.org/vuls/id/884840
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
Mitigation
Technical Description
Third Party Advisory
http://www.kb.cert.org/vuls/id/884840
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
Mitigation
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:animas:onetouch_ping_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:animas:onetouch_ping:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03006

Низкий

9.8 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-53v9-44m6-4qm5