CVE-2022-40703 - CVE House
Back to Database
Status published Medium CVE-2022-40703

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App...

Vulnerability Description

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40703

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Carlos Cilleruelo Rodríguez
  • Javier Junquera Sánchez

References

More from AliveCor

View All →
CVE-2022-41627
The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based...
Medium 4.8

Affected Vendor

Affected Software

Kardia App
Vulnerable Versions:
0

Timeline

Official Publish: October 26th, 2022
Last Modified: April 16th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Weaknesses (CWE)

CWE-302

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.