TI-2023-05245 CVE-2023-5702 · GHSA-782x-9xpx-3gm4
Viessmann Vitogate 300 direct request
Priority MEDIUM 47
A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic.
Vulnerabilities
3 records
TI-2023-24609 CVE-2023-45852 · GHSA-4j4f-q993-cr2r
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to…
Priority HIGH 82
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.
TI-2023-04802 CVE-2023-5222 · GHSA-cm4f-g738-hp2g
Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
Priority HIGH 82
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0.