Animas Onetouch Ping Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Animas Onetouch Ping Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2016-5086 — CVSS 9.8 (critical): Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.
• CVE-2016-5686 — CVSS 9.8 (critical): Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass…
• CVE-2016-5084 — CVSS 7.5 (high): Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain…
• CVE-2016-5085 — CVSS 7.5 (high): Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof…