7.2
High
CVE-2023-37859 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root…
Description
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP 6070-WVPS 4.0 | earliest → < 4.0.10 | 4.0.10 |
| WP 6101-WXPS 4.0 | earliest → < 4.0.10 | 4.0.10 |
| WP 6121-WXPS 4.0 | earliest → < 4.0.10 | 4.0.10 |
| WP 6156-WHPS 4.0 | earliest → < 4.0.10 | 4.0.10 |
| WP 6185-WHPS 4.0 | earliest → < 4.0.10 | 4.0.10 |
| WP 6215-WHPS 4.0 | earliest → < 4.0.10 | 4.0.10 |
Other CVEs of WP 6070-WVPS
The 14 CVEs of WP 6070-WVPS →
CVE-2023-37858
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin…
4.9
Medium
CVE-2023-37857
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin…
3.8
Low
CVE-2023-37855
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is…
4.3
Medium
CVE-2023-37856
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is…
4.3
Medium