ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2020-10627

Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.
A workaround or mitigation is available. Apply it until an official patch is released.
7.3
CVSS
5.3
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityLow
RequirementsPresent
PrivilegesNone
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityLow
IntegrityHigh
AvailabilityLow
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusMitigation

Change Log
DateSourceChangesScore
2026-07-21PoCE: U→P2.2 → 5.3
2026-07-21cve.orginitial, patch: Mitigation2.2

Affected Software
VendorProductVersion
InsuletOmnipod Insulin Management System19191
InsuletOmnipod Insulin Management System40160
InsuletOmnipod Insulin Management SystemZXP425
InsuletOmnipod Insulin Management SystemZXR425
insuletomnipod_insulin_management_system_firmwareAll versions
Published: 2021-12-01