FreeMDU

FreeMDU FreeMDU 프로젝트는 Miele 가전제품의 광학 진단 인터페이스를 통해 통신할 수 있는 개방형 하드웨어 및 소프트웨어 도구를 제공합니다. 이 프로젝트는 등록된 서비스 기술자만 사용할 수 있는 독점 Miele 진단 유틸리티MDU 소프트웨어의 무료 오픈소스 대안입니다. 1996년 이후에 제조된 대부분의 Miele 기기에는 전면 패널의 표시등 중 하나 뒤에 숨겨진 적외선 기반 광학 진단 인터페이스가 포함되어 있습니다. 구형 기기에서는 이 인터페이스가 프로그램 교정PC 라벨로 표시되어 있습니다. 지금까지 이 인터페이...

Advisories

セキュリティアドバイザリ このリポジトリには、ペネトレーションテスト中に発見・報告された複数の脆弱性が含まれています。 このリポジトリのすべてのコンテンツは、教育目的のみで提供されています。 リンク https://www.securityweek.com/organizations-notified-of-remotely-exploitable-vulnerabilities-in-aveva-hmi-scada-products/ https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02...

CVE-2019-20481

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480...

CVE-2019-20480

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection...

EUVD-2019-11025

Malware in sbrugna...

EUVD-2019-11024

Malware in sbrugna...

EUVD-2022-42953

Malicious code in bioql PyPI...

EUVD-2022-27667

Malicious code in bioql PyPI...

Miele appWash Access Control Error Vulnerability

Miele appWash is a laundry room digitization app from Miele Germany. Miele appWash suffers from an Access Control Error vulnerability that stems from the use of an API endpoint to bypass authorization checks. An attacker could use this vulnerability to gain read and partial write access to data...

CVE-2022-3589

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or...

CVE-2022-3589 Miele: Vulnerability in cloud service used by appWash

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or...

CVE-2022-3589

CVE-2022-3589 concerns Miele AppWash: an API endpoint used by the MobileApp was vulnerable to an authorization bypass. The vulnerability allows a low-privileged, remote attacker to read and perform partial writes to other users’ data by modifying a small part of an HTTP request to the API. The de...

CVE-2022-3589 Miele: Vulnerability in cloud service used by appWash

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or...

PT-2022-22999 · Miele · Appwash Mobileapp

Name of the Vulnerable Software and Affected Versions: Miele AppWash MobileApp affected versions not specified Description: The issue concerns an API endpoint used by Miele's AppWash MobileApp, which was vulnerable to an authorization bypass. A low-privileged, remote attacker could gain read and...

Miele appWash 安全漏洞

Miele appWash is a laundry room digitization app from Miele Germany. Miele appWash suffers from an Access Control Error vulnerability that stems from the use of an API endpoint to bypass authorization checks. An attacker could use this vulnerability to gain read and partial write access to data...

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

Code injection

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

CVE-2022-22521 Privilege Escalation in Miele Benchmark Programming Tool

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

CVE-2022-22521

CVE-2022-22521 affects the Miele Benchmark Programming Tool. Versions prior to 1.2.71 allow an attacker with low privileges to cause a user with administrative privileges to execute manipulated executables, enabling privilege escalation. The issue is documented across multiple sources (NVD/NVD CV...