Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2025-9494 | 23 Sep 202510:00 | – | circl |
 | Viessmann Vitogate 300 安全漏洞 | 23 Sep 202500:00 | – | cnnvd |
 | CVE-2025-9494 Viessmann Vitogate 300 OS Command Injection | 23 Sep 202501:12 | – | cvelist |
 | EUVD-2025-30434 | 3 Oct 202520:07 | – | euvd |
 | CVE-2025-9494 | 23 Sep 202502:15 | – | nvd |
 | PT-2025-39103 | 23 Sep 202500:00 | – | ptsecurity |
 | CVE-2025-9494 | 25 Sep 202502:53 | – | redhatcve |
 | CVE-2025-9494 Viessmann Vitogate 300 OS Command Injection | 23 Sep 202501:12 | – | vulnrichment |
 | Viessmann Vitogate 300 BN/MB vitogate.cgi form-0-2 Command Injection Remote Code Execution Vulnerability | 1 Oct 202500:00 | – | zdi |
[
{
"defaultStatus": "unaffected",
"product": "Vitogate 300",
"vendor": "Viessmann",
"versions": [
{
"lessThan": "3.1.0.0",
"status": "affected",
"version": "1",
"versionType": "SKU"
}
]
}
]| Source | Link |
|---|---|
| corporate | www.corporate.carrier.com/product-security/advisories-resources/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| form | request body | /cgi-bin/vitogate.cgi | OS command injection through unsanitized input in the form JSON parameter (form-0-2) that is interpolated into a format string used by popen(), enabling authenticated code execution on Vitogate 300. | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Apr 2026 00:35Current
8High risk
Vulners AI Score8
CVSS 48.5
EPSS0.00246
SSVC