Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Miele Clear all filters
TI-2022-03303 CVE-2022-3589 · GHSA-cj87-vv3f-mmxj

Miele: Vulnerability in cloud service used by appWash

Priority LOW 37

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00764 Published 2022-11-21 No fix listed CWE-639
TI-2022-06797 CVE-2022-22521 · GHSA-x568-473g-qj6x

Privilege Escalation in Miele Benchmark Programming Tool

Priority LOW 33

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0053 Published 2022-04-27 No fix listed CWE-732
TI-2019-14707 CVE-2019-20480 · GHSA-c2p4-cjxh-qw87

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an…

Priority LOW 38

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00356 Published 2020-02-24 No fix listed CWE-352