CVE-2021-27503CWE-798

CVE-2021-27503: falha em Ypsomed mylife Cloud, mylife Mobile Application

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Ypsomed mylife Cloud, mylife Mobile Application

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.6%
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on hard-coded secrets, which allows man-in-the-middle attackers to tamper with messages.
Produtos afetados
n/a · Ypsomed mylife Cloud, mylife Mobile Application