CVE-2020-27375
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to transmitting write requests and characters, which may allow an attacker to manipulate device data or functions.
Risk Assessment
The risk includes unauthorized modification of settings or blood pressure measurement data, potentially leading to incorrect readings and affecting medical decisions.
Recommendation
It is recommended to immediately update the device firmware to the latest version and restrict access to the network where the device is used.
Other vulnerabilities in Dr Trust USA iCheck Connect BP Monitor
See all- CVE-2020-27376High
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 suffers from missing authentication. This means it does not require proper login to access its functions or data.
- CVE-2020-27374High
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to a Replay Attack during BP monitoring. An attacker can intercept and replay valid requests, leading to unauthorized access or data manipulation.
Original NVD description (English source)
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS