https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-27269.htmlhttps://patchthecve.com/cve/CVE-2020-27269.htmlWed, 17 Jun 2026 03:09:05 +0000MEDIUM 5.7: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences vihttps://patchthecve.com/cve/CVE-2020-27268.htmlhttps://patchthecve.com/cve/CVE-2020-27268.htmlWed, 17 Jun 2026 03:09:05 +0000MEDIUM 6.5: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy.https://patchthecve.com/cve/CVE-2020-27266.htmlhttps://patchthecve.com/cve/CVE-2020-27266.htmlWed, 17 Jun 2026 03:09:05 +0000MEDIUM 6.5: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy.https://patchthecve.com/cve/CVE-2020-27264.htmlhttps://patchthecve.com/cve/CVE-2020-27264.htmlWed, 17 Jun 2026 03:09:04 +0000HIGH 8.8: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Enerhttps://patchthecve.com/cve/CVE-2020-27256.htmlhttps://patchthecve.com/cve/CVE-2020-27256.htmlWed, 17 Jun 2026 03:09:03 +0000MEDIUM 6.8: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings.https://patchthecve.com/cve/CVE-2020-27276.htmlhttps://patchthecve.com/cve/CVE-2020-27276.htmlWed, 17 Jun 2026 03:09:05 +0000MEDIUM 5.7: SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate athttps://patchthecve.com/cve/CVE-2020-27272.htmlhttps://patchthecve.com/cve/CVE-2020-27272.htmlWed, 17 Jun 2026 03:09:05 +0000MEDIUM 5.7: SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the https://patchthecve.com/cve/CVE-2020-27270.htmlhttps://patchthecve.com/cve/CVE-2020-27270.htmlWed, 17 Jun 2026 03:09:05 +0000MEDIUM 5.7: SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).