Viessmann Climate Solutions SE Vitogate 300
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5702US | medium6.5 | Exploit | ||
A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The man… | ||||
| CVE-2023-45852US | critical9.8 | — | ||
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr par… | ||||
| CVE-2023-5222US | critical9.8OT hoch | Exploit | ||
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of t… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-254-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-254-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationViessmann Vitogate 300
Viessmann Climate Solutions SE recommends customers update to version 3.0.0.0 to fix these vulnerabilities. The software is available to download at their (website)
https://connectivity.viessmann.com/de/mp-fp/vitogate/vitogate-300-bn-mb.html - MitigationViessmann Vitogate 300
Viessmann Climate Solutions SE recommends customers update to version 3.0.0.0 to fix these vulnerabilities. The software is available to download at their (website)
https://connectivity.viessmann.com/de/mp-fp/vitogate/vitogate-300-bn-mb.html - MitigationViessmann Vitogate 300
Viessmann Climate Solutions SE recommends customers update to version 3.0.0.0 to fix these vulnerabilities. The software is available to download at their (website)
https://connectivity.viessmann.com/de/mp-fp/vitogate/vitogate-300-bn-mb.html
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan