CVE-2019-20481

9.8 criticalEPSS 0.6%

Critical (9.8) in miele xgw 3000 zigbee gateway firmware. EPSS 0.6% chance of exploitation in the next 30 days.

In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-02-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

miele:xgw_3000_zigbee_gateway_firmware

References

https://cert.vde.com/en-us/advisories/vde-2019-010
https://cert.vde.com/en-us/advisories/vde-2019-010

Check your stack JSON