CVE-2025-24843 Information disclosure in Dario Application Database and Internet-based Server Infrastructure
Attackers can manipulate stored data in the Android app, compromising confidentiality and integrity of blood glucose monitoring information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-24843?
CVE-2025-24843 is a medium-severity vulnerability in Dario Application Database and Internet-based Server Infrastructure, published on 28 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.
Weakness: CWE-921
Which versions are affected by CVE-2025-24843?
How do I fix CVE-2025-24843?
No fix has been published for CVE-2025-24843 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-24843 being exploited?
There is no known exploitation of CVE-2025-24843 in the wild and no public exploit code.
Sources
Also known as GHSA-9w44-6hcw-v783.