CVE-2025-20060 - Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

Back Back to CVE browser

HIGH

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

Published Feb 28, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.40%

Description

An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android device via the Dario Health application database.

Affected products

Vendor Dario Health Product Dario Application Database and Internet-based Server Infrastructure Default
unaffected
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Dario Health Product USB-C Blood Glucose Monitoring System Starter Kit Android Applications Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.8.7.0.36

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dario Health

Dario Application Database and Internet-based Server Infrastructure

unaffected

Version	Status	Constraints
All versions	affected	-

Dario Health

USB-C Blood Glucose Monitoring System Starter Kit Android Applications

unaffected

Version	Status	Constraints
0	affected	<5.8.7.0.36

Remediation

Vendor solution

Dario Health recommends users update their Dario Health Android mobile application to the latest version. No other actions are required by users.

Weaknesses (1)

CWE-359

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5947		Advisory
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-058-01
https://www.dariohealth.com/contact/