CVE Catalog

CVE-2016-5686

Critical
Published: Translated: NVD NIST

Summary

Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.

Risk Assessment

Attackers may gain access to devices without authorization, posing a serious threat to patient safety and their data.

Recommendation

It is recommended to update the device firmware and implement additional security measures to protect against unauthorized access.

Original NVD description (English source)

Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS