ZeroHour

Vulnerabilities

5 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-27373
+3 in the same advisory: …27376 …27374 …27375
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE.

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE.

NVD description · AI analysis pending
8.8
group max
<1% PoC
  • drtrustusa icheck connect bp monitor bp testing 118 firmware
CVE-2020-15486
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices.

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved data can also be extracted over a Bluetooth connection. In addition, an attacker can launch a man-in-the-middle attack against data integrity.

NVD description · AI analysis pending
6.5<1%
  • drtrust electrocardiogram pen firmware