Description
itogate 300 是用于将 Viessmann LON 连接到 BACnet 或 Modbus 的网关。组件 /cgi-bin/vitogate.cgi 中的问题允许未经身份验证的攻击者绕过身份验证并通过精心设计的请求执行任意命令。
Vitogate 300 /cgi-bin/vitogate.cgi 命令执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-45852
https://github.com/Push3AX/vul/blob/main/viessmann/Vitogate300_RCE.md
https://avd.aliyun.com/detail?id=AVD-2023-45852
https://blog.csdn.net/xuandao_ahfengren/article/details/141156759
https://cn-sec.com/archives/2168718.html
https://www.exploit-db.com/exploits/51887
https://ask.csdn.net/questions/8940815
https://www.zerodayinitiative.com/advisories/ZDI-25-925/
https://app.opencve.io/cve/?product=vitogate_300&vendor=viessmann