Skip to content
Sign in
10.0 Critical

CVE-2023-3572 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use…

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.

Affected products and versions

Product Affected versions Fixed in
WP 6070-WVPS 4.0 earliest → < 4.0.10 4.0.10
WP 6101-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6121-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6156-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6185-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6215-WHPS 4.0 earliest → < 4.0.10 4.0.10
wp_6070-wvps 4.0 earliest → < 4.0.10 4.0.10
wp_6101-wxps 4.0 earliest → < 4.0.10 4.0.10
wp_6121-wxps 4.0 earliest → 4.0.10 No fix stated
Show the 3 other branches
Product Affected versions Fixed in
wp_6156-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6185-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6215-whps 4.0 earliest → < 4.0.10 4.0.10

Other CVEs of WP 6070-WVPS

The 14 CVEs of WP 6070-WVPS →
CVE-2023-37858 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 4.9 Medium CVE-2023-37857 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 3.8 Low CVE-2023-37855 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium CVE-2023-37856 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium
Track this CVE