CVE-2025-20615 — Qardio Heart Health IOS Mobile Application Exposure of Private Personal Information to an Unauthorized Actor
The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accoun…
Published: 2025-02-13 · CVSS: 6.2 · CVSS 3.1
The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accounts and access an engineering backdoor in the application. The engineering backdoor allows the attacker to send hex-based commands over a UI-based terminal.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7