1. Home
  2. CVE Database
  3. CVE-2022-40703
MEDIUM · 5.2

CVE-2022-40703

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android de...

Vulnerability Description

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.

CVSS Score

5.2

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
AlivecorKardia<= 5.17.1-754993421

Related Weaknesses (CWE)

CWE-302CWE-287

References

FAQ

What is CVE-2022-40703?

CVE-2022-40703 is a vulnerability with a CVSS score of 5.2 (MEDIUM). CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android de...

How severe is CVE-2022-40703?

CVE-2022-40703 has been rated MEDIUM with a CVSS base score of 5.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-40703?

Check the references section above for vendor advisories and patch information. Affected products include: Alivecor Kardia.