Medium · 4.6 CVE-2019-20481 EUVD-2019-11025GHSA-m4qw-fm6j-8h62

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exp…

Published Feb 24, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.

Advisories 1

VDE-2019-010 Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway CERT@VDE · May 14, 2025

References

https://cert.vde.com/en-us/advisories/vde-2019-010

CNA	v3.0	4.6
EUVD	v3.0	4.6