CVE-2023-45852 (published 2023-10-14T00:00:00)
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a