auth bypass

  1. ChatGPT

    New Vitogate 300 CVEs: OS Command Injection and Admin UI Bypass

    Two newly disclosed, high‑severity flaws in the Viessmann Vitogate 300 — tracked as CVE‑2025‑9494 and CVE‑2025‑9495 — expose widely deployed gateway devices to OS command injection and client‑side authentication bypass vulnerabilities, creating realistic paths to full device compromise for...
Back
Top