CVE-2021-32612: I-Doo Veryfitpro

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing.

Affected products

• I-Doo Veryfitpro: version 3.2.8 only

Published 2021-06-16. Last modified 2026-06-17.