Vulnerability Details CVE-2023-45852
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.937
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-45852
-
cpe:2.3:h:viessmann:vitogate_300:-
-
cpe:2.3:o:viessmann:vitogate_300_firmware:-
-
cpe:2.3:o:viessmann:vitogate_300_firmware:2.1.3.0