CVE-2016-5084
UnknownEPSS 2.22%
Last modified
CVE-2016-5084 is a vulnerability of currently unknown severity. Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.. EPSS estimates a 2.22% chance of exploitation in the next 30 days.
Description
Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Animas | Onetouch Ping Firmware | All versions |
References
- http://www.kb.cert.org/vuls/id/884840Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A9SQRSThird Party Advisory, US Government Resource
- https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pumpMitigation, Technical Description, Third Party Advisory
- http://www.kb.cert.org/vuls/id/884840Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A9SQRSThird Party Advisory, US Government Resource
- https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pumpMitigation, Technical Description, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-5084?
Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.
How severe is CVE-2016-5084?
Severity scoring for CVE-2016-5084 is pending analysis. The EPSS model estimates a 2.22% probability of exploitation in the next 30 days.
How do I fix CVE-2016-5084?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-5075CloudView NMS before 2.10a has XSS via a TELNET login.
- CVE-2016-5076CloudView NMS before 2.10a allows remote attackers to obtain…
- CVE-2016-5077Netikus EventSentry before 3.2.1.44 has XSS via SNMP.
- CVE-2016-5078Paessler PRTG before 16.2.24.4045 has XSS via SNMP.
- CVE-2016-5080Integer overflow in the rtxMemHeapAlloc function in asn1rt_a…
- CVE-2016-5081ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root…
- CVE-2016-5085Johnson & Johnson Animas OneTouch Ping devices do not proper…
- CVE-2016-5086Johnson & Johnson Animas OneTouch Ping devices allow remote …
- CVE-2016-5087Alertus Desktop Notification before 2.9.31.1710 on OS X uses…
- CVE-2016-5091Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and …
- CVE-2016-5092Directory traversal vulnerability in Fortinet FortiWeb befor…
- CVE-2016-5093The get_icu_value_internal function in ext/intl/locale/local…
Are you affected by CVE-2016-5084?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST