| शीर्षक | Vitogate300_Document Unauthorized Access |
|---|
| विवरण | The Vitogate 300, the gateway used to connect the Viessmann LON to BACnet or Modbus, was deployed with a problem that allowed an attacker to access sensitive content such as configuration files without logging in.
Affected system version: x.x.x.x and lower
Vulnerability details:When we use directory scanning software like dirsearch, we can access and download these scanned directories without any authentication.It's very easy to get the configuration information of the server and the accounts and passwords and other related content
|
|---|
| स्रोत | ⚠️ https://github.com/GTA12138/vul/blob/main/Viessmann/Vitogate300_Document_Unauthorized_Access.md |
|---|
| उपयोगकर्ता | rollingchair (UID 56410) |
|---|
| सबमिशन | 15/10/2023 07:20 AM (3 साल पहले) |
|---|
| संयम | 22/10/2023 06:09 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 243140 [Viessmann Vitogate 300 तक 2.1.3.0 /cgi-bin/ अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|