Smartlog App
Approved changes feed: RSS · Atom
cpe:2.3:a:i-sens:smartlog_app:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | I Sens (8fe1d1c4-89c6-502c-9776-2b55b0f34a2d) |
|---|---|
| Product | Smartlog App (1de90578-80b6-53bf-b338-b77a4e894fc1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4216 |
vulnerable | 2026-06-08 08:05:13.029309 |
i-SENS SmartLog App air.SmartLog.android hard-coded credentials
MEDIUM (5.3)
A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard-coded credentials. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor explains: "The function referenced in the report currently exists in our deployed system. It is related to a developer mode used during the configuration process for Bluetooth pairing between the blood glucose meter and the SmartLog application. This function is intended for configuration purposes related to device integration and testing. (...) [I]n a future application update, we plan to review measures to either remove the developer mode function or restrict access to it."
Published: 2026-03-16T05:02:08.472Z
Updated: 2026-03-16T18:45:09.497Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.