AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-9495

UNKNOWN · CVSS N/A EPSS 0.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-09-23 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. See the original NVD description below for full technical details.

CVE
CVE-2025-9495
Severity
UNKNOWN
CVSS
N/A
EPSS
0.29%

Original NVD Description

The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls. This allows an attacker to simply modify HTML elements in the browser’s developer tools to bypass login restrictions. By removing specific UI elements, an attacker can reveal the hidden administration menu, giving them full control over the device.