VULNERABILITY INTELLIGENCE
CVE-2016-5085
CVSS score7.5 HIGH
EPSS probability3.86%
CISA KEVNot currently listed
Published2016-10-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.
Weakness classification
- CWE-330: Use of Insufficiently Random Values
Primary references
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org
- cret@cert.org — Mitigation, Technical Description, Third Party Advisory
- cret@cert.org
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108