Vendors / Miele Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Miele records in CISA KEV No Miele vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00587 · Published 2020-02-24 · No fix listed CWE-287
Priority LOW 38
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00356 · Published 2020-02-24 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
1 3 0 0 0
