Vulnerabilities (CVE)

Filtered by vendor Miele Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22521 1 Miele 1 Benchmark Programming Tool 2023-08-09 6.9 MEDIUM 7.3 HIGH
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.
CVE-2019-20480 1 Miele 2 Xgw 3000 Zigbee Gateway, Xgw 3000 Zigbee Gateway Firmware 2020-02-28 6.8 MEDIUM 8.8 HIGH
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.