National Cyber Warfare Foundation (NCWF)

CVE-2023-45852 (vitogate_300_firmware)

0 user ratings

2023-10-18 22:13:47
milo
CVEs
- archive --

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

CVE-2023-45852 (vitogate_300_firmware)
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45852
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.
2023-10-14T02:15:09Z

Source: CVEAnnouncements
Source Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45852

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

CVEs

CVE-2023-45852 (vitogate_300_firmware)

Comments