VULNERABILITY INTELLIGENCE

CVE-2022-40703

CVSS score5.2 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2022-10-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Description

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-302
  • nvd@nist.gov: CWE-287

Primary references