Daiki Ichinose

Name of the Vulnerable Software and Affected Versions: InBody App for iOS versions prior to 2.3.30 InBody App for Android versions prior to 2.2.90(510) Description: The issue may lead to information disclosure when the InBody App is used with the body composition analyzer InBody Dial. This could allow an attacker who connects to the InBody Dial using the InBody App to obtain a victim's measurement results. Recommendations: For InBody App for iOS versions prior to 2.3.30, update to version 2.3.30 or later. For InBody App for Android versions prior to 2.2.90(510), update to version 2.2.90(510) or later.

The issue allows an attacker on the same network segment to bypass access restrictions, potentially accessing information and files stored on the affected device.

The issue allows an attacker on the same network segment to bypass access restrictions, potentially leading to the execution of arbitrary OS commands or code, as well as information leakage or alteration, including credentials.

The issue allows an attacker on the same network segment to add malicious files on the device and execute arbitrary code.

The issue concerns the use of hardcoded credentials in the affected products, potentially allowing a remote authenticated attacker to execute arbitrary OS commands on the device.

The issue allows remote attackers to execute arbitrary OS commands.