Vulnerability · Published Feb 28, 2025 · Assigned by icscert
CVE-2025-20049Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting
Medium 5.8
In plain English
A medium-severity cross-site scripting in Dario Application Database and Internet-based Server Infrastructure from Dario Health. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)5.8Medium
Exploit odds (30 days)0.3%top 77.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dario Health | Dario Application Database and Internet-based Server Infrastructure | All versions |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N