NVD

Id
20442  
Name
CVE-2016-5085  
Description
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-19  
Published
2016-10-05  
Modified Date
2016-12-23  
Seq
2016-5085  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111747 20442 CVE-2016-5085 VU#884840  View
111748 20442 CVE-2016-5085 http://www.kb.cert.org/vuls/id/BLUU-A9SQRS  View
111749 20442 CVE-2016-5085 93351  View
111750 20442 CVE-2016-5085 https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump  View
111751 20442 CVE-2016-5085 https://ics-cert.us-cert.gov/advisories/ICSMA-16-279-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4348 JVNDB-2016-005121 Johnson & Johnson Animas OneTouch Ping デバイスにおけるメータになりすまされる脆弱性 Johnson & Johnson Animas OneTouch Ping デバイスは、乱数を適切に生成しないため、メータになりすまされる脆弱性が存在します。 CVE-2016-5085 91591 CVE-2016-5085 20442 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005121.html 2016-10-04 2016-10-11 View