Description
With a specially crafted Python script, an attacker could send
continuous startMeasurement commands over an unencrypted Bluetooth
connection to the affected device. This would prevent the device from
connecting to a clinician's app to take patient readings and ostensibly
flood it with requests, resulting in a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qardio | Heart Health IOS Mobile Application | 2.7.4 | — |
| Qardio | Heart Health Android Mobile Application | 2.5.1 | — |
| Qardio | QardioARM | All versions | — |
Advisories 1
- ICSMA-25-044-01 Qardio Heart Health IOS and Android Application and QardioARM A100 CISA ICS & IT advisories · Feb 13, 2025