Vitogate 300 CVE-2023-45852 任意命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-45852
• https://github.com/runZeroInc/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45852.yaml
• https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-45852
• https://cvefeed.io/vuln/detail/CVE-2023-45852
• https://avd.aliyun.com/detail?id=AVD-2023-45852
• https://github.com/zeroChen00/exp-poc/blob/main/ViessmannVitogateRCE%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2023-45852%EF%BC%89.md
• https://cn-sec.com/archives/2168718.html
• https://blog.csdn.net/xuandao_ahfengren/article/details/141156759
• https://gist.github.com/komodoooo/edacac1987268273f48afe752f4efb31
• https://advisories.github.com/github/advisories/GHSA-4j4f-q993-cr2r
• https://jvn.jp/vu/JVNVU96407043/index.html
• https://vuldb.com/?id=243140
• https://stack.chaitin.com/vuldb/detail/d69a6326-23dc-4f23-9985-8e8a57bd57db
• https://www.ddpoc.com/DVB-2023-5395.html
• https://connectivity.viessmann.com/gb/mp-fp/vitogate/vitogate-300-bn-mb.html

Related Vulnerabilities

• PoCCVE-2023-45852: Viessmann Vitogate 300 - Remote Code Execution
• PoCCVE-2023-5222: Viessmann Vitogate 300 - Hardcoded Password
• Vitogate300远程命令执行(CVE-2023-45852)
• Vitogate 300 /cgi-bin/vitogate.cgi 命令执行