CVE-2020-27376
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 suffers from missing authentication. This means it does not require proper login to access its functions or data.
Risk Assessment
Missing authentication allows unauthorized individuals to access the device and potentially sensitive medical data. This could lead to patient privacy breaches and manipulation of blood pressure readings.
Recommendation
Immediately update the device firmware to the latest version if a patch is available from the vendor. If no update is available, restrict device access to a trusted network only and consider replacing it with a model that has built-in authentication.
Other vulnerabilities in Dr Trust USA iCheck Connect BP Monitor
See all- CVE-2020-27375Medium
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to transmitting write requests and characters, which may allow an attacker to manipulate device data or functions.
- CVE-2020-27374High
The Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to a Replay Attack during BP monitoring. An attacker can intercept and replay valid requests, leading to unauthorized access or data manipulation.
Original NVD description (English source)
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication.