Skip to content
7.5 High

CVE-2023-37860 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain…

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.

Affected products and versions

Product Affected versions Fixed in
WP 6070-WVPS 4.0 earliest → < 4.0.10 4.0.10
WP 6101-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6121-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6156-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6185-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6215-WHPS 4.0 earliest → < 4.0.10 4.0.10
wp_6070-wvps 4.0 earliest → < 4.0.10 4.0.10
wp_6101-wxps 4.0 earliest → < 4.0.10 4.0.10
wp_6121-wxps 4.0 earliest → < 4.0.10 4.0.10
Show the 3 other branches
Product Affected versions Fixed in
wp_6156-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6185-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6215-whps 4.0 earliest → < 4.0.10 4.0.10
The 14 CVEs of WP 6070-WVPS →
Track this CVE