PRODUCT PROFILE

vitogate_300_firmware

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2023-458522023/10/14

Viessmann Vitogate 300 - Remote Code Execution

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

vitogate_300_firmwarePoC 已收录EXP 已收录RCE

CVSS9.8EPSS 93.7%

严重CVE-2023-52222023/09/27

Viessmann Vitogate 300 - Hardcoded Password

A critical vulnerability in Viessmann Vitogate 300 up to 2.1.3.0 allows attackers to authenticate using hardcoded credentials in the Web Management Interface.

vitogate_300_firmwarePoC 已收录RCE

CVSS9.8EPSS 90.7%