Log in / Sign up

Vulnerability details

CVE-2025-24849

Dario Health Dario Application Database and Internet-based Server InfrastructureDario Health USB-C Blood Glucose Monitoring System Starter Kit Android Applications

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

CVSS 4.0
7.5High

Official description

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure.

CVSS scores

ScoreVersionSourceVector
7.5High 4.0 CVEProject cvelistV5 (CNA) (icscert) CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
7.1High 3.1 CVEProject cvelistV5 (CNA) (icscert) CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Dario Health Dario Application Database and Internet-based Server Infrastructure All versions CVEProject cvelistV5 (CNA)
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Applications v < 5.8.7.0.36 CVEProject cvelistV5 (CNA)

References and advisories

2
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-02-28
Last updated
2025-03-01
State
Published
Assigner (CNA)
icscert

Exploit prediction (EPSS)

0.09%
Probability of exploitation in 30 days
0.4%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-319
    Cleartext Transmission of Sensitive Information