Viessmann records

3 published records for vendor viessmann.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
63This week	CVE-2023-5222Proof of concept	Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded passwordviessmann · vitogate 300 firmware · CWE-259 Pre-auth Hard-coded credentials	Critical9.8	—	80.4%	Sep 27, 2023
44Plan	CVE-2023-45852Proof of concept	In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands viviessmann · vitogate 300 firmware · CWE-77 pre-auth RCE Auth bypass Command injection	Critical9.8	—	15.2%	Oct 13, 2023
30Monitor	CVE-2023-5702Proof of concept	Viessmann Vitogate 300 direct requestviessmann · vitogate 300 firmware · CWE-425 Pre-auth	Medium6.5	—	14.5%	Oct 22, 2023

CVE-2023-5222
63This week
Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
CriticalCVSS 9.8Proof of conceptEPSS 80%
- Pre-auth
- Hard-coded credentials
viessmann · vitogate 300 firmwareSep 27, 2023
CVE-2023-45852
44Plan
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands vi
CriticalCVSS 9.8Proof of conceptEPSS 15%
viessmann · vitogate 300 firmwareOct 13, 2023
CVE-2023-5702
30Monitor
Viessmann Vitogate 300 direct request
MediumCVSS 6.5Proof of conceptEPSS 14%
- Pre-auth
viessmann · vitogate 300 firmwareOct 22, 2023