PatchTheCVEonetouch ping firmware vulnerabilities and fixes
Recent CVEs affecting onetouch ping firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: onetouchpingfirmware.
onetouch ping firmware has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2016-10-05. Highest priority: CVE-2016-5686 (score 62/100).
- CVE-2016-5686 CRITICAL 9.8 MITIGATE Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote at
- CVE-2016-5086 CRITICAL 9.8 MITIGATE Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay atta
- CVE-2016-5085 HIGH 7.5 MITIGATE Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier
- CVE-2016-5084 HIGH 7.5 MITIGATE Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remot
FAQ
How do I fix onetouch ping firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is onetouch ping firmware being exploited right now?
None of the tracked onetouch ping firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which onetouch ping firmware CVE should I patch first?
CVE-2016-5686 currently ranks highest (62/100): Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote at.