Vulnerability CVE-2016-5085
Published: 2016-10-05

Description:
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:C/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.8/10
6.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Complete
None
Affected software
Animas -> Onetouch ping firmware 

 References:
http://www.kb.cert.org/vuls/id/884840
http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
http://www.securityfocus.com/bid/93351
https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump
https://ics-cert.us-cert.gov/advisories/ICSMA-16-279-01
Copyright 2024, cxsecurity.com

 

Back to Top