CVE-2020-27376

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-27376
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

8.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:A/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 6.5 / Impact : 10.0

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://dr.com Product
https://drtrust.in/collections/dr-trust-blood-pressure-testing/products/dr-trust-usa-icheck-connect-bp-monitor Product
https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c Exploit Third Party Advisory
http://dr.com Product
https://drtrust.in/collections/dr-trust-blood-pressure-testing/products/dr-trust-usa-icheck-connect-bp-monitor Product
https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:drtrustusa:icheck_connect_bp_monitor_bp_testing_118_firmware:1.2.1:*:*:*:*:*:*:*
cpe:2.3:h:drtrustusa:icheck_connect_bp_monitor_bp_testing_118:-:*:*:*:*:*:*:*
History

21 Nov 2024, 05:21

Type Values Removed Values Added
References () http://dr.com - Product () http://dr.com - Product
References () https://drtrust.in/collections/dr-trust-blood-pressure-testing/products/dr-trust-usa-icheck-connect-bp-monitor - Product () https://drtrust.in/collections/dr-trust-blood-pressure-testing/products/dr-trust-usa-icheck-connect-bp-monitor - Product
References () https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c - Exploit, Third Party Advisory () https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c - Exploit, Third Party Advisory

14 Apr 2022, 18:59

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : 8.3
v3 : 8.8
CPE cpe:2.3:o:drtrustusa:icheck_connect_bp_monitor_bp_testing_118_firmware:1.2.1:*:*:*:*:*:*:*
cpe:2.3:h:drtrustusa:icheck_connect_bp_monitor_bp_testing_118:-:*:*:*:*:*:*:*
CWE CWE-306
References (MISC) https://drtrust.in/collections/dr-trust-blood-pressure-testing/products/dr-trust-usa-icheck-connect-bp-monitor - (MISC) https://drtrust.in/collections/dr-trust-blood-pressure-testing/products/dr-trust-usa-icheck-connect-bp-monitor - Product
References (MISC) https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c - (MISC) https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c - Exploit, Third Party Advisory
References (MISC) http://dr.com - (MISC) http://dr.com - Product

07 Apr 2022, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-04-07 02:15

Updated : 2024-11-21 05:21

NVD link : CVE-2020-27376

Mitre link : CVE-2020-27376

CVE.ORG link : CVE-2020-27376

JSON object : View

Products Affected

drtrustusa

  • icheck_connect_bp_monitor_bp_testing_118_firmware
  • icheck_connect_bp_monitor_bp_testing_118
CWE
CWE-306

Missing Authentication for Critical Function