Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01 | Third Party Advisory US Government Resource |
| https://www.myomnipod.com/security-bulletins | Vendor Advisory |
| https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01 | Third Party Advisory US Government Resource |
| https://www.myomnipod.com/security-bulletins | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 04:55
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.8
v3 : 7.3 |
| References | () https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01 - Third Party Advisory, US Government Resource | |
| References | () https://www.myomnipod.com/security-bulletins - Vendor Advisory |
25 Sep 2023, 02:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Insulet omnipod Insulin Management System
Insulet Insulet omnipod Insulin Management System Firmware |
|
| CPE | cpe:2.3:o:omnipod:insulin_management_system_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:omnipod:insulin_management_system:19191:*:*:*:*:*:*:* |
cpe:2.3:h:insulet:omnipod_insulin_management_system:40160:*:*:*:*:*:*:* cpe:2.3:h:insulet:omnipod_insulin_management_system:19191:*:*:*:*:*:*:* cpe:2.3:o:insulet:omnipod_insulin_management_system_firmware:-:*:*:*:*:*:*:* |
Information
Published : 2021-12-01 16:15
Updated : 2024-11-21 04:55
NVD link : CVE-2020-10627
Mitre link : CVE-2020-10627
CVE.ORG link : CVE-2020-10627
JSON object : View
Products Affected
insulet
- omnipod_insulin_management_system_firmware
- omnipod_insulin_management_system
CWE