Insecure Random Number Generation in Johnson & Johnson Animas OneTouch Ping Devices

Insecure Random Number Generation in Johnson & Johnson Animas OneTouch Ping Devices

CVE-2016-5085 · HIGH Severity

AV:N/AC:L/AU:N/C:N/I:C/A:N

Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.

Learn more about our Network Penetration Testing.