CVE-2020-27374
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to a Replay Attack during BP monitoring. An attacker can intercept and replay valid requests, leading to unauthorized access or data manipulation.
Risk Assessment
The risk involves potential falsification of blood pressure readings, which could result in incorrect medical diagnosis or unauthorized access to patient data. Organizations using this device are exposed to integrity breaches of medical data.
Recommendation
It is recommended to immediately update the device firmware to the latest version if a patch is available from the manufacturer. If no update is available, consider discontinuing use of the device until replay attack protections are implemented.
Other vulnerabilities in Dr Trust USA iCheck Connect BP Monitor
See all- CVE-2020-27376High
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 suffers from missing authentication. This means it does not require proper login to access its functions or data.
- CVE-2020-27375Medium
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to transmitting write requests and characters, which may allow an attacker to manipulate device data or functions.
Original NVD description (English source)
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring.