Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-40703
HistoryOct 26, 2022 - 9:15 p.m.

CVE-2022-40703

2022-10-2621:15:10
CWE-302
CWE-287
[email protected]
web.nvd.nist.gov
5
cve-2022-40703
cwe-302
android
authentication bypass
alivecor kardia app

CVSS3

6.1

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

24.2%

JSON

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior

on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.

Affected configurations

Nvd
Node
alivecorkardiaRange≤5.17.1-754993421android
VendorProductVersionCPE
alivecorkardia*cpe:2.3:a:alivecor:kardia:*:*:*:*:*:android:*:*

Related

cvelist 1
cve 1
prion 1
ics 1
cvelist
cvelist
CVE-2022-40703
2022-10-26 20:02:06
cve
cve
CVE-2022-40703
2022-10-26 21:15:10
prion
prion
Authentication flaw
2022-10-26 21:15:00
ics
ics
AliveCor KardiaMobile
2022-11-14 12:00:00

CVSS3

6.1

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

24.2%

JSON
Related for NVD:CVE-2022-40703
cvelist1cve1prion1ics1