CVE-2020-27269: Sooil Anydana-A Firmware

Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days.

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences via Bluetooth Low Energy.

Affected products

• Sooil Anydana-A Firmware: before 3.0 (fixed in 3.0)
• Sooil Anydana-I Firmware: before 3.0 (fixed in 3.0)
• Sooil Diabecare RS Firmware: before 3.0 (fixed in 3.0)

Published 2021-01-19. Last modified 2026-06-17.