viessmann vitogate 300 firmware

Name: viessmann vitogate 300 firmware
Brand: viessmann

productUS

cpe:2.3:o:viessmann:vitogate_300_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical0high1medium0low

updated 2026-10-27

vulnerabilities (3)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-5222US	critical9.8OT high	80.4% (100th)	Exploit	no fix	2023-09-27	≤ 2.1.3.0
CVE-2023-5702US	medium6.5	18.7% (97th)	Exploit	no fix	2023-10-23	≤ 2.1.3.0
CVE-2023-45852US	critical9.8	15.2% (97th)	—	no fix	2023-10-14	≤ 2.1.3.0

The flaw types (CWEs) most of these CVEs share.

CWE-259Use of Hard-coded Password1 CVEs
CWE-425Direct Request ('Forced Browsing')1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.