Skip to content
OpenAdvisories
High ICSA-25-266-04 2 CVEs

Viessmann Vitogate 300

Published Sep 23, 2025 · Updated Sep 23, 2025

Vendor: Viessmann Product: Vitogate 300

Summary

Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server.

Vulnerabilities 2

  • High 8.7
    CVE-2025-9495

    Viessmann Vitogate 300 Authentication Bypass

    The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls. This allows an attacker to simply modify HTML elements in the browser’s developer tools to bypass login restrictions. By re…

    Viessmann Vitogate 300
  • High 8.5
    CVE-2025-9494

    Viessmann Vitogate 300 OS Command Injection

    An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the `/cgi-bin/vitogate.cgi` endpoint is affected, when the `form` JSON parameter is se…

    Viessmann Vitogate 300

Revision history

  1. #1

    Initial Publication

References