CVE-2022-3589 | BDVDB-2026-189072 Detail

Description#

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-11-21Record published in the CVE List.
2. Version 22025-04-25Most recent update recorded in the CVE List.