Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application
Successful exploitation of these vulnerabilities could allow an attacker to expose information, inject code, manipulate data, or achieve cross-site scripting (XSS), resulting in full session compromise.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-24849US | —OT elevated | — | ||
Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure. | ||||
| CVE-2025-24843US | — | — | ||
Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored… | ||||
| CVE-2025-24318US | — | — | ||
Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise. | ||||
| CVE-2025-24316US | — | — | ||
The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality. | ||||
| CVE-2025-23405US | — | — | ||
Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks (ex log injection). | ||||
| CVE-2025-20060US | — | — | ||
An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android device via the Dario Health application datab… | ||||
| CVE-2025-20049US | — | — | ||
The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-25-058-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-25-058-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (14)
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationDario Application Database and Internet-based Server Infrastructure
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
- MitigationUSB-C Blood Glucose Monitoring System Starter Kit Android Applications
Avoid public untrusted networks
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan