CVE-2025-23421CWE-552

Qardio iOS and Android applications Files or Directories Accessible to External Parties

Medium · published February 13, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

An attacker could obtain firmware files and reverse engineer their

intended use leading to loss of confidentiality and integrity of the

hardware devices enabled by the Qardio iOS and Android applications.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-02-13T21:50Z
EPSS history
Timeline
  • 13 FEB 21:50Z
    Qardio iOS and Android applications Files or Directories Accessible to External Parties
    cvelistv5