Description
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Quanovate Tech Inc. (operating as Mira / Mira Care) | Mira Firmware | 1.7.1.47 | — |
| Quanovate Tech Inc. (operating as Mira / Mira Care) | Mira Android App | 4.5.15.4 | — |
Advisories 1
- ICSMA-26-223-01 Mira Hormone Monitor, Mira Android App CISA ICS & IT advisories · Aug 11, 2026