Lucene search

MitreCVE-2023-45852

HistoryOct 14, 2023 - 2:15 a.m.

CVE-2023-45852

2023-10-1402:15:09

CWE-77

mitre

web.nvd.nist.gov

vitogate 300

cve-2023-45852

authentication bypass

command execution

security vulnerability

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.038

Percentile

92.1%

JSON

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

Affected configurations

Nvd

Node

viessmannvitogate_300_firmwareRange≤2.1.3.0

AND

viessmannvitogate_300Match-

VendorProductVersionCPE
viessmannvitogate_300_firmware*cpe:2.3:o:viessmann:vitogate_300_firmware:*:*:*:*:*:*:*:*
viessmannvitogate_300-cpe:2.3:h:viessmann:vitogate_300:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
viessmann	vitogate_300_firmware	*	cpe:2.3:o:viessmann:vitogate_300_firmware::::::::
viessmann	vitogate_300	-	cpe:2.3:h:viessmann:vitogate_300:-:::::::*

References

connectivity.viessmann.com/gb/mp-fp/vitogate/vitogate-300-bn-mb.html

github.com/Push3AX/vul/blob/main/viessmann/Vitogate300_RCE.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.038

Percentile

92.1%

JSON

Related for CVE-2023-45852