Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: AliveCor Clear all filters
TI-2022-20028 CVE-2022-41627 · GHSA-4x7m-cpcp-9gfm

Cleartext transmission of sensitive information in AliveCor KardiaMobile

Priority LOW 32

The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram (EKG) has no encryption for its data-over-sound protocols.

CVSS 3.1HIGH 7.6 Adjacent network No auth No interaction EPSS 0.0012 Published 2022-10-27 No fix listed CWE-311
TI-2022-19338 CVE-2022-40703 · GHSA-65jr-q7fr-5gcv

Improper authentication in AliveCor Kardia App

Priority LOW 27

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the ap…

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00354 Published 2022-10-26 No fix listed CWE-302