Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-23405 EUVD-2025-5940GHSA-62rc-944q-7vq6

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs

Published Feb 28, 2025 · Updated Feb 28, 2025 · Assigned by icscert

Vendor: Dario Health Product: Dario Application Database and Internet-based Server Infrastructure Product: USB-C Blood Glucose Monitoring System Starter Kit Android Applications Platform: Android

Description

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks (ex log injection).

Affected products

VendorProductAffectedFixed
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Applications < 5.8.7.0.36 5.8.7.0.36
Dario Health Dario Application Database and Internet-based Server Infrastructure All versions —

Advisories 1

References