Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-5702

Опубликовано: 23 окт. 2023
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
CVSS2: 3.3
EPSS Средний

Описание

A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243140. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:viessmann:vitogate_300_firmware:*:*:*:*:*:*:*:*
Версия до 2.1.3.0 (включая)
cpe:2.3:h:viessmann:vitogate_300:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.29373
Средний

4.3 Medium

CVSS3

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-425
CWE-425

Связанные уязвимости

CVSS3: 4.3
github
больше 2 лет назад

A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243140. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 96%
0.29373
Средний

4.3 Medium

CVSS3

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-425
CWE-425