SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the keys and spoof the pump via BLE.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-27272
• https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01