Johnson & Johnson Animas OneTouch Ping devices vulnerabilities
4 known CVE vulnerabilities in Johnson & Johnson Animas OneTouch Ping devices, translated and rated.
- CVE-2016-5085High
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, making it easier for remote attackers to spoof meters by sniffing the network and engaging in an authentication handshake.
- CVE-2016-5084High
Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.
- CVE-2016-5686Critical
Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.
- CVE-2016-5086Critical
Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.