CVE-2025-20060

An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android device via the Dario Health application database.

Score

CVSS 4.0 8.7 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-02-28

Last modified

2025-02-28

Weaknesses

CWE-359

Affected products

• Dario Application Database And Internet-based Server Infrastructure (Dario Health)
• Usb-c Blood Glucose Monitoring System Starter Kit Android Applications (Dario Health)

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-058-01
• https://www.dariohealth.com/contact/