PatchTheCVEveryfitpro vulnerabilities and fixes
Recent CVEs affecting veryfitpro, with upgrade or downgrade steps. 2 tracked.
veryfitpro has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-25. Highest priority: CVE-2021-32612 (score 55/100).
- CVE-2021-36460 HIGH 7.8 UPGRADE UPGRADE VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash
- CVE-2021-32612 HIGH 8.1 DOWNGRADE The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend A
FAQ
How do I fix veryfitpro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is veryfitpro being exploited right now?
None of the tracked veryfitpro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which veryfitpro CVE should I patch first?
CVE-2021-32612 currently ranks highest (55/100): The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend A.