Lucene search

K

Miele Security Vulnerabilities

cve
cve

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as...

7.3CVSS

7.2AI Score

0.001EPSS

2022-04-27 04:15 PM
64
2
cve
cve

CVE-2022-3589

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or...

8.1CVSS

8.2AI Score

0.001EPSS

2022-11-21 10:15 AM
34
9
cve
cve

CVE-2019-20480

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF...

8.8CVSS

9AI Score

0.001EPSS

2020-02-24 03:15 PM
21
cve
cve

CVE-2019-20481

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with...

9.8CVSS

8.6AI Score

0.003EPSS

2020-02-24 03:15 PM
22
cve
cve

CVE-2017-7240

An issue was discovered on Miele Professional PST10 devices. The corresponding embedded webserver "PST10 WebServer" typically listens to port 80 and is prone to a directory traversal attack; therefore, an unauthenticated attacker may be able to exploit this issue to access sensitive information to....

7.5CVSS

7.3AI Score

0.018EPSS

2017-03-24 03:59 PM
42