CVE-2020-10627

Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.

• CWE-284

• https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01Third Party Advisory, US Government Resource
• https://www.myomnipod.com/security-bulletinsVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01Third Party Advisory, US Government Resource
• https://www.myomnipod.com/security-bulletinsVendor Advisory

Published

Dec 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10621Multiple issues exist that allow files to be uploaded and ex…9.8
• CVE-2020-10622LCDS LAquis SCADA Versions 4.3.1 and prior. The affected pro…7.8
• CVE-2020-10623Multiple vulnerabilities could allow an attacker with low pr…6.5
• CVE-2020-10624ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101…7.5
• CVE-2020-10625WebAccess/NMS (versions prior to 3.0.2) allows an unauthenti…9.8
• CVE-2020-10626In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontr…7.8
• CVE-2020-10628ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101…7.5
• CVE-2020-10629WebAccess/NMS (versions prior to 3.0.2) does not sanitize XM…7.5
• CVE-2020-1063A cross site scripting vulnerability exists when Microsoft D…5.4
• CVE-2020-10630SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The softwa…6.1
• CVE-2020-10631An attacker could use a specially crafted URL to delete or r…9.8
• CVE-2020-10632Inadequate folder security permissions in Emerson OpenEnterp…5.3