Approved changes feed: RSS · Atom

cpe:2.3:h:miele:xgw_3000_zigbee_gateway:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMiele (d54bc21e-b733-54ce-89c4-a5565489c53d)
ProductXgw 3000 Zigbee Gateway (78d7ec39-331e-57d0-afd5-5e05aaf64657)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20481 not_vulnerable 2026-06-08 05:13:40.689263 Details available
MEDIUM (4.6)
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.
Published: 2020-02-24T14:35:42.000Z
Updated: 2024-08-05T02:39:10.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20480 not_vulnerable 2026-06-08 05:13:40.688792 Details available
MEDIUM (4.6)
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.
Published: 2020-02-24T14:35:58.000Z
Updated: 2024-08-05T02:39:09.989Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.