CVE-2021-32612

8.1 highEPSS 1.1%

High (8.1) in i-doo veryfitpro. EPSS 1.1% chance of exploitation in the next 30 days.

The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2021-06-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

i-doo:veryfitpro

References

http://seclists.org/fulldisclosure/2021/Jun/45
https://play.google.com/store/apps/details?id=com.veryfit2hr.second&hl=en_US&gl=US
https://trovent.github.io/security-advisories/TRSA-2105-01/TRSA-2105-01.txt
https://trovent.io/security-advisory-2105-01
http://seclists.org/fulldisclosure/2021/Jun/45

Check your stack JSON