CVE-2022-3589 — Miele: Vulnerability in cloud service used by appWash
An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain rea…
Published: 2022-11-21 · CVSS: 8.1 · CVSS 3.1
An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7