https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:58:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-59936 EUVD-2026-59936 https://cve.radiocsirt.org/vuln/euvd-2026-59936 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20481 <p>In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.</p> <p>In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-20481 https://cve.radiocsirt.org/vuln/ghsa-m4qw-fm6j-8h62 <p>In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.</p> <p>In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.</p> https://cve.radiocsirt.org/vuln/ghsa-m4qw-fm6j-8h62 https://cve.radiocsirt.org/vuln/gsd-2019-20481 gsd-2019-20481 https://cve.radiocsirt.org/vuln/gsd-2019-20481 https://cve.radiocsirt.org/vuln/vde-2019-010 <p>Miele XGW 3000 is a ZigBee-TCP/IP gateway. The gateway connects Miele ZigBee-Appliances (called Miele@home) with local customer TCP/IP-Network and allows visualizing the appliance state on the web interface of the gateway, Miele SuperVision capable appliance, smartphone/tablet app or home automatization device.</p> <p>An external security researcher reported two vulnerabilities in XGW 3000 gateway and provided a Proof-of-Concept. The combined exploitation of both vulnerabilities allow the circumvention of the authentication mechanisms of the XGW3000.</p> <p>The Miele PSIRT managed to reproduce the findings and successfully exploited the gateway. Therefore, the existence of all vulnerabilities has been confirmed.</p> <p>Miele XGW 3000 is a ZigBee-TCP/IP gateway. The gateway connects Miele ZigBee-Appliances (called Miele@home) with local customer TCP/IP-Network and allows visualizing the appliance state on the web interface of the gateway, Miele SuperVision capable appliance, smartphone/tablet app or home automatization device.</p> <p>An external security researcher reported two vulnerabilities in XGW 3000 gateway and provided a Proof-of-Concept. The combined exploitation of both vulnerabilities allow the circumvention of the authentication mechanisms of the XGW3000.</p> <p>The Miele PSIRT managed to reproduce the findings and successfully exploited the gateway. Therefore, the existence of all vulnerabilities has been confirmed.</p> https://cve.radiocsirt.org/vuln/vde-2019-010