EUVD-2026-56981
GHSA-r6p2-jjcr-jm7c
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible cloud endpoint requires no authentication or user interaction; impact limited to low confidentiality via account access, with no integrity or availability impact supported by the description.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use brute-force methods to obtain gain access to user accounts.
AnalysisAI
Brute-force credential attacks against Mira's cloud authentication endpoints are unrestricted due to the complete absence of per-account rate limiting, per-IP throttling, and account lockout controls, as disclosed in CISA ICS Medical Advisory ICSMA-26-223-01. Affected products include Mira Firmware 1.7.1.47 and Mira Android App 4.5.15.4 from Quanovate Tech Inc. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required for exploitation - the cloud authentication endpoints are accessible over the public network without prior authentication, and the missing controls apply universally to all Mira accounts regardless of user role, plan tier, or configuration. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 6.9 with vector AV:N/AC:L/AT:N/PR:N/UI:N confirms unauthenticated, low-complexity, network-accessible exploitation with no special attack requirements, though the scored impact is limited to VC:L (low confidentiality) with no integrity or availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker targeting a healthcare organization using Mira Care intercepts or identifies the cloud authentication endpoint through analysis of the Mira Android App's API traffic. Using an off-the-shelf credential stuffing tool loaded with a breach-derived email and password corpus, the attacker sends tens of thousands of authentication requests with no server-side throttling or lockout triggered. … |
| Remediation | Consult CISA ICS Medical Advisory ICSMA-26-223-01 at https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 for vendor-specific patch guidance; patch available per vendor advisory, but no exact patched firmware or app version number was present in the available source data and fix version is not independently confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Mira Firmware
View allAuthentication bypass in the Mira fertility-tracking cloud API allows any remote attacker to take over user accounts by
Session token exposure in the Mira Android app (Quanovate Tech Inc.) leaks live authentication credentials to third-part
Firmware version spoofing in the Mira cloud API allows authenticated users to submit arbitrary firmware version strings
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today