CVE-2023-5222

Summary

CVE-2023-5222 is a critical vulnerability discovered in Viessmann Vitogate 3.0 up to version 3.1.3.0. This issue lies in the isValidUser function of the vitogate.cgi component within the Web Management Interface. Manipulation of this function results in the use of a hard-coded password. The exploit for this vulnerability, identified as VDB-240364, has been made public, increasing the risk of unauthorized access. Regrettably, the vendor did not respond to early disclosure attempts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.