Description
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows man-in-the-middle attackers to tamper with messages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ypsomed mylife Cloud, mylife Mobile Application | Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5 | — |
Advisories 1
- ICSMA-21-196-01 ICSMA-21-196-01_Ypsomed mylife CISA ICS & IT advisories · Jul 15, 2021