CVE-2022-3589

CVE-2022-3589 describes an authorization bypass vulnerability in the Miele AppWash mobile application's API endpoint, affecting all versions. A low-privileged, remote attacker could exploit this by modifying HTTP requests to gain read and partial write access to other users' data. With a CVSS score of 8.1 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, potentially leading to high confidentiality and integrity impacts, though password modification was not possible. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.