Dario Health USB-C Blood Glucose Monitoring System Android Application Cross-User PII Exposure Vulnerability

A vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android application, all versions through 5.8.7.0.36. This vulnerability allows an attacker to access cross-user personal identifiable information (PII) and personal health information stored in the application's database. The issue arises from improper data handling and lack of access controls, enabling unauthorized exposure of sensitive information transmitted to the Android device.

Impact

Exploitation of this vulnerability could lead to unauthorized access and exposure of personal health information and cross-user PII, potentially allowing for data manipulation or injection attacks.

Remediation

Users are advised to update the Dario Health Android application to the latest version. For more information, contact Dario Health directly.