Medium severity6.2NVD Advisory· Published Feb 13, 2025· Updated Jun 17, 2026
CVE-2025-20615
CVE-2025-20615
Description
The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accounts and access an engineering backdoor in the application. The engineering backdoor allows the attacker to send hex-based commands over a UI-based terminal.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Qardio/Heart Health IOS Mobile Applicationv5Range: 2.7.4
Patches
Vulnerability mechanics
References
2- www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01nvdUS Government Resource
- www.qardio.com/about-us/nvdProduct
News mentions
0No linked articles in our index yet.