CVE-2022-40703

6.1 mediumEPSS 0.4%

Medium (6.1) in alivecor kardia. EPSS 0.4% chance of exploitation in the next 30 days.

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-302
Published: 2022-10-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

alivecor:kardia

References

https://www.cisa.gov/uscert/ics/advisories/icsma-22-298-01
https://www.cisa.gov/uscert/ics/advisories/icsma-22-298-01

Check your stack JSON