Our takeCISA reports that Mira Hormone Monitor firmware and the Mira Android app have multiple flaws that let attackers access or alter health data, steal session tokens, hijack accounts, or DoS the device. Update all affected versions if you use them.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update Mira Hormone Monitor firmware and the Mira Android app to the latest versions. CISA reports these flaws allow unauthorized access to health data, account takeover, session token theft, and denial-of-service.
What this means for you — Lean IT orgs:If your team uses the Mira Hormone Monitor or its Android app, update the firmware and app immediately. Most small teams without these devices can ignore this one.
What this means for you — MSP:Check client environments for any use of Mira Hormone Monitor devices or the Mira Android app and ensure firmware and app updates are applied. This primarily affects clients in healthcare or fertility tracking.
What this means for you — Researcher:Review the CISA ICSMA-26-223-01 advisory for the full set of vulnerabilities in Mira Hormone Monitor firmware and the Android app, including impacts on health data access and account control.