CVE-2020-10627

 

Published at: - 01-12-2021 05:15

Last modified: - 25-10-2022 06:12

Total changes: - 3

Description

Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

 

Verification logic

 

Reference

• https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01
• https://www.myomnipod.com/security-bulletins

 

Keywords

NVD

 

CVE-2020-10627

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures