Description (CNA)
With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Qardio / Heart Health IOS Mobile Application | affected 2.7.4 |
| Qardio / Heart Health Android Mobile Application | affected 2.5.1 |
| Qardio / QardioARM | affected All versions |
CWE
CWE-248
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01
- https://www.qardio.com/about-us/#contact
ADP enrichment
No English description supplied.
No references supplied.