CVE-2016-5084

CVE-2016-5084 describes a critical vulnerability in Johnson & Johnson Animas OneTouch Ping insulin pumps and their firmware, where sensitive patient data is transmitted without encryption. This allows remote attackers to intercept and obtain confidential information by sniffing the network. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to severe confidentiality breaches. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some community discussion and media coverage, highlighting the potential for patient harm.