ICSMA-21-196-01_Ypsomed mylife
Julian Suleder, Linda Huischen, and Nils Emmerich of ERNW Research GmbH and Dr. Oliver Matula of Enno Rey Netzwerke GmbH (ERNW) reported these vulnerabilities to the Federal Office for Information Security (BSI, Germany), in the context of the BSI project ManiMed - Manipulation of Medical Devices.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27503US | medium4.8OT elevated | — | ||
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the… | ||||
| CVE-2021-27499US | medium5.9OT elevated | — | ||
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryption… | ||||
| CVE-2021-27495US | high7.1OT elevated | — | ||
Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,he Ypsomed mylife Cloud reflects the… | ||||
| CVE-2021-27491US | high7.5OT elevated | — | ||
Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed mylife Cloud discloses p… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationYpsomed mylife App
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife App
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife App
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife App
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife Cloud
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife Cloud
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife Cloud
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
- MitigationYpsomed mylife Cloud
Ypsomed has taken action to update the affected mylife Cloud backend services to mitigate the vulnerabilities affecting the mylife Cloud in versions prior to 1.7.2. Ypsomed recommends users with the affected mobile application to update to the latest available application Version 1.7.5 or later.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan