CVE

CVE-2023-45852

9.8

CVSS

Description

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 22, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2023-45852 Scanner

Detects 'Remote Code Execution' vulnerability in Viessmann Vitogate 300 affects v. 2.1.3.0

Used 3.1k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →