In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-27256
• https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01