CVE-2025-23421

6.9 mediumEPSS 0.2%

Medium (6.9). EPSS 0.2% chance of exploitation in the next 30 days.

An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

6.4 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-11-01)
CWE: CWE-552
Published: 2025-02-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01
https://www.qardio.com/about-us/#contact

Check your stack JSON