CVE-2020-27270: Sooil Anydana-A Firmware

Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days.

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE).

Affected products

• Sooil Anydana-A Firmware: before 3.0 (fixed in 3.0)
• Sooil Anydana-I Firmware: before 3.0 (fixed in 3.0)
• Sooil Diabecare RS Firmware: before 3.0 (fixed in 3.0)

Published 2021-01-19. Last modified 2026-06-17.