CVE-2020-27264 - AskarLabs CVE Database

CVE-2020-27264

Vendor N/A

Product SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A

Weakness CWE-330 · Insufficient randomness

Published January 19, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy.

Key dates

02Disclosure timeline

January 19, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-27264 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/330.html

Related vulnerabilities

04Related CVE

CVE-2023-46740 Insecure random string generator used for sensitive data CVE-2025-64097 NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force CVE-2018-13280 CVE-2025-12787 Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation CVE-2020-25705