CVE-2025-24849CWE-319

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

High · published February 28, 2025

CVSS v4.0
7.5
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00090 · 0.4th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-02-28T16:58Z
EPSS history
Timeline
  • 28 FEB 16:58Z
    Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information
    cvelistv5