.. / CVE-2023-5222

• Auth Bypass
• Nuclei
• Web

Exploit for Viessmann Vitogate 300 - Hardcoded Password (CVE-2023-5222)

Description:

A critical vulnerability in Viessmann Vitogate 300 up to 2.1.3.0 allows attackers to authenticate using hardcoded credentials in the Web Management Interface.

Nuclei Template

View the template here CVE-2023-5222.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-5222.yaml

References: