CVE-2020-27256 - AskarLabs CVE Database

CVE-2020-27256

Vendor N/A

Product SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A

Weakness CWE-798 · Hardcoded credentials

Published January 19, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings.

Key dates

02Disclosure timeline

January 19, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-27256 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/798.html

Related vulnerabilities

04Related CVE

CVE-2014-125121 Array Networks vAPV and vxAG Default Credential Privilege Escalation CVE-2024-11630 E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub CVE-2021-33529 WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability CVE-2026-45039 RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation