Viessmann Vitogate 300

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server.

CVEs (2)

Remediations

• These vulnerabilities have been resolved in Vitogate 300 software version 3.1.0.1. Users are strongly encouraged to upgrade by downloading software version 3.1.0.1 or newer from the Vitogate 300 website.
• For more information refer to Carrier's product security advisory CARR-PSA-2025-02.

Affected Vendors

Affected Products (1)

Affected Sectors

Commercial Facilities