Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.
Dario Health recommends users update their Dario Health Android mobile application to the latest version. No other actions are required by users.
Configurations
Workarounds
Dario Health recommends users perform the following mitigations:
* Update the application from trusted sources.
* Don't use rooted/jailbroken devices.
* Avoid public untrusted network.
* For more information contact Dario Health https://www.dariohealth.com/contact/ directly.
Exploits
Credits
finder
Noah Cutler and Manuel Del Rio of Accenture reported these vulnerabilities to CISA.
Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.