critical9.8
CVE-2019-20481
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password.
Impact
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Miele | Xgw 3000 Zigbee Gateway Firmware | before 2.4.0 |