CyberSecBulletin

Miele vulnerabilities

We track 2 vulnerabilities in Miele products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 21, 2022.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest Miele vulnerabilities

  • 8.1 High severity

    appWash: Authorization Bypass Through User-Controlled Key

    CVE-2022-3589Miele

    An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP

  • 7.3 High severity

    Benchmark Programming Tool: Incorrect Permission Assignment for Critical Resource

    CVE-2022-22521Miele

    In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binari