Home Embedded Vulns General Vulns

CVE-2019-20481

CRITICAL 9.8

Our Analysis: Environment Specific

Our model has classified this vulnerability as relevant to Environment Specific Systems, helping your team prioritize efforts effectively.

Published Date February 24, 2020
Last Modified November 21, 2024
CVSS Vector Not Available

Description

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.

Potentially Affected Vendors