CVE-2021-36460

HIGH

VeryFitPro 3.2.8 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-36460. PoCs published by martinfrancois.

AI-analyzed exploit summary The repository provides a detailed technical analysis of CVE-2021-36460, a vulnerability in the VeryFitPro app where password hashes are used for authentication instead of the actual password. This allows for a Pass the Hash attack, enabling account takeover without knowledge of the original password.

Description

VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's account, rendering the benefits of storing hashed passwords in the database useless.

Exploits (1)

nomisec WRITEUP
by martinfrancois · poc
https://github.com/martinfrancois/CVE-2021-36460

The repository provides a detailed technical analysis of CVE-2021-36460, a vulnerability in the VeryFitPro app where password hashes are used for authentication instead of the actual password. This allows for a Pass the Hash attack, enabling account takeover without knowledge of the original password.

Classification
Writeup 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: VeryFitPro app (Android: com.veryfit2hr.second, iOS) <=3.3.7
No auth needed
Prerequisites: Obtain the password hash of a user (e.g., through SQL injection, information exposure, or sniffing)
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Not Applicable, Third Party Advisory, URL Repurposed x_refsource_misc
http://veryfitpro.com
Not Applicable
http://www.i-doo.cn
Exploit, Mitigation, Third Party Advisory
https://github.com/martinfrancois/CVE-2021-36460

Scores

CVSS v3 7.8
EPSS 0.0036
EPSS Percentile 28.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (1)
veryfitpro_project/veryfitpro < 3.3.7 (2 CPE variants)
Published Apr 25, 2022
Tracked Since Feb 18, 2026