SOOIL Dana Diabecare RS insulin pump and apps can be spoofed and bypassed over Bluetooth
CISA advisory ICSMA-21-012-01 covers nine flaws in the SOOIL Dana Diabecare RS insulin pump and AnyDana-i and AnyDana-A apps before 3.0, including deterministic Bluetooth keys (CVE-2020-27264, CVSS 7.6) and a hard-coded physician PIN (CVE-2020-27256). Version 3.0 fixes them.