Read the docs

AliveCor

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

AliveCor records in CISA KEV

No AliveCor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kardia 1 record LOW Kardiamobile 6l Firmware 1 record LOW Kardiamobile Card Firmware 1 record LOW Kardiamobile Firmware 1 record LOW

Records

2 records

TI-2022-20028 CVE-2022-41627 · GHSA-4x7m-cpcp-9gfm

Cleartext transmission of sensitive information in AliveCor KardiaMobile

Priority LOW 32

The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram (EKG) has no encryption for its data-over-sound protocols.

CVSS 3.1HIGH 7.6 Adjacent network No auth No interaction EPSS 0.0012 Published 2022-10-27 No fix listed CWE-311
TI-2022-19338 CVE-2022-40703 · GHSA-65jr-q7fr-5gcv

Improper authentication in AliveCor Kardia App

Priority LOW 27

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the ap…

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00354 Published 2022-10-26 No fix listed CWE-302
Open these records in search →