Vulnerabilities

TI-2025-08701 CVE-2025-9495 · GHSA-jmw7-g9jf-52hh

Viessmann Vitogate 300 Authentication Bypass

LOW 39

The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00241 Published 2025-09-23 Fixed in 3.0.0.0 CWE-602

TI-2025-08700 CVE-2025-9494 · GHSA-75cp-gjjh-3r55

Viessmann Vitogate 300 OS Command Injection

MEDIUM 40

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00675 Published 2025-09-23 Fixed in 3.1.0.0 CWE-78

TI-2023-05245 CVE-2023-5702 · GHSA-782x-9xpx-3gm4

Viessmann Vitogate 300 direct request

MEDIUM 47

A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.18701 Published 2023-10-23 No fix listed CWE-425

TI-2023-24609 CVE-2023-45852 · GHSA-4j4f-q993-cr2r

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to…

HIGH 82

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15247 Published 2023-10-14 No fix listed CWE-77

TI-2023-04802 CVE-2023-5222 · GHSA-cm4f-g738-hp2g

Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password