Known vulnerabilities in Vitogate 300

Vendor: Viessmann
Software: Vitogate 300
Software CPE: cpe:2.3:h:viessmann:vitogate_300:*:*:*:*:*:*:*:*
Website: https://www.viessmann.com/
Total vulnerabilities: 5
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vitogate 300 Vitogate 300 is affected by 5 known vulnerabilities: 2 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116072 - Client-Side Enforcement of Server-Side Security
CVE-2025-9495		 CWE-602 Medium
No
No
 3.1.0.1 24.09.2025 SB2025092427
#VU116071 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-9494		 CWE-78 Low
No
No
 3.1.0.1 24.09.2025 SB2025092427
#VU97312 - Command injection
CVE-2023-45852		 CWE-77 High
No
No
 3.0.0.0 16.09.2024 SB2024091620
#VU97310 - Direct Request ('Forced Browsing')
CVE-2023-5702		 CWE-425 Low
Available
No
 3.0.0.0 16.09.2024 SB2024091620
#VU97309 - Use of Hard-coded Credentials
CVE-2023-5222		 CWE-798 High
Available
No
 3.0.0.0 16.09.2024 SB2024091620