CVE-2022-3589

Katalog CVE

CVSS 8.1 · High EPSS 0,74%

Kerentanan Authorization Bypass Through User-Controlled Key pada miele appwash. Skor CVSS 3.1 8.1 (High) menurut cert.vde.com.

Deskripsi (NVD)

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.

Rincian

Terbit di NVD

21 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber cert.vde.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.vde.com/de/advisories/VDE-2022-052/ advisory pihak ketiga