Dario Health USB-C Blood Glucose Monitoring System Unauthenticated Log Injection Vulnerability

A vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android application, all versions through 5.8.7.0.36. The issue arises from improper output neutralization for logs, allowing unauthenticated log effects metrics gathering that could disrupt incident response efforts. This vulnerability also potentially opens the door to injection attacks, such as log injection.

Impact

Exploitation of this vulnerability could lead to unauthorized log manipulation, disrupting incident response efforts and potentially allowing for injection attacks, according to CISA.

Remediation

Users are advised to update the Dario Health Android mobile application to the latest version. For more information, contact Dario Health directly.