Vendors / Viessmann Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Viessmann records in CISA KEV No Viessmann vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15247 · Published 2023-10-14 · No fix listed CWE-77
Priority HIGH 82
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.80402 · Published 2023-09-27 · No fix listed CWE-259
Priority MEDIUM 47
A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.18701 · Published 2023-10-23 · No fix listed CWE-425
Open these records in search → All records by CVSS severity
2 2 1 0 0
