CVE-2023-46447

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46447
The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/actuator/rebel/blob/main/CWE-319.md Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.pops.pops Product
https://popsdiabetes.com/about-us/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:popsdiabetes:rebel:5.0:*:*:*:*:android:*:*
History

29 Jan 2024, 15:27

Type Values Removed Values Added
References () https://github.com/actuator/rebel/blob/main/CWE-319.md - () https://github.com/actuator/rebel/blob/main/CWE-319.md - Exploit, Third Party Advisory
References () https://play.google.com/store/apps/details?id=com.pops.pops - () https://play.google.com/store/apps/details?id=com.pops.pops - Product
References () https://popsdiabetes.com/about-us/ - () https://popsdiabetes.com/about-us/ - Product
CWE CWE-319
First Time Popsdiabetes
Popsdiabetes rebel
CPE cpe:2.3:a:popsdiabetes:rebel:5.0:*:*:*:*:android:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3

22 Jan 2024, 14:01

Type Values Removed Values Added
Summary
  • (es) La aplicación POPS! Rebel 5.0 para Android, en POPS! Rebel Bluetooth Glucose Monitoring System envía mediciones de glucosa sin cifrar a través de BLE.

20 Jan 2024, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-20 05:15

Updated : 2024-01-29 15:27

NVD link : CVE-2023-46447

Mitre link : CVE-2023-46447

CVE.ORG link : CVE-2023-46447

JSON object : View

Products Affected

popsdiabetes

  • rebel
CWE
CWE-319

Cleartext Transmission of Sensitive Information