Vendors / Miele Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Miele records in CISA KEV No Miele vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00587 · Published 2020-02-24 · No fix listed CWE-287
Priority LOW 38
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00356 · Published 2020-02-24 · No fix listed CWE-352
Priority LOW 37
An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2022-11-21 · No fix listed CWE-639
Priority LOW 33
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges.
CVSS 3.1 HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.0053 · Published 2022-04-27 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
1 3 0 0 0
THREATIST.IORead the docs