PT-2023-31940 · Viessmann · Viessmann Vitogate 300

Name of the Vulnerable Software and Affected Versions: Viessmann Vitogate 300 versions up to 2.1.3.0 Description: A critical vulnerability was found in the Web Management Interface component of Viessmann Vitogate 300. This issue affects the isValidUser function of the file /cgi-bin/vitogate.cgi,...

Viessmann Vitogate Security Breach

Viessmann Vitogate is an intelligent control system from Viessmann. A security vulnerability exists in Viessmann Vitogate due to the use of hard-coded passwords in the isValidUser function in /cgi-bin/vitogate.cgi in the component's web management interface...