- Description
- The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accounts and access an engineering backdoor in the application. The engineering backdoor allows the attacker to send hex-based commands over a UI-based terminal.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 6.2
- Impact score
- 5.5
- Exploitability score
- 0.7
- Vector string
- CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- Severity
- MEDIUM
- ics-cert@hq.dhs.gov
- CWE-359
- Hype score
- Not currently trending
Actively exploited CVE : CVE-2025-20615
@transilienceai
14 Feb 2025
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
CVE-2025-20615 The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level develop… https://t.co/bC2cq0qNxK
@CVEnew
13 Feb 2025
333 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes