Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive health-related information and prevent legitimate users from establishing a connection with the device.
The following versions of Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT are affected:
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
Cleartext Transmission of Sensitive Information, Missing Authorization
Critical Infrastructure Sectors: Healthcare and Public Health
Countries/Areas Deployed: India
Company Headquarters Location: India
An attacker within BLE communication range can passively intercept wireless traffic and obtain sensitive health-related information, including glucose measurement values.