CVE-2025-23421
Qardio iOS and Android applications Files or Directories Accessible to External Parties
- State
- Published
- Severity
- 6.9 Medium
- Published
- Feb 13, 2025
- Updated
- Feb 14, 2025
- Reserved
- Feb 10, 2025
Description
An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N | icscert |
| 3.1 | 6.4 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L | icscert |
Weaknesses
- CWE-552 Files or Directories Accessible to External Parties
Affected Products
| Product | Versions |
|---|---|
Heart Health IOS Mobile ApplicationQardio |
|
Heart Health Android Mobile ApplicationQardio |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.