CVE-2023-45852

Summary

CVE-2023-45852 is a vulnerability affecting In Vitogate 3.0.2.1. An unauthenticated attacker can exploit this issue by manipulating JSON data in the ipaddr params of the put method in the /cgi-bin/vitogate.cgi file. This allows the attacker to bypass authentication and execute arbitrary commands using shell metacharacters. Successful exploitation could result in unauthorized system access or data theft. Organizations running In Vitogate are urged to apply the necessary patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.