Skip to content
Sign in
8.8 High

CVE-2023-37861 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute…

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.

Affected products and versions

Product Affected versions Fixed in
WP 6070-WVPS 4.0 earliest → < 4.0.10 4.0.10
WP 6101-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6121-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6156-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6185-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6215-WHPS 4.0 earliest → < 4.0.10 4.0.10
wp_6070-wvps 4.0 earliest → < 4.0.10 4.0.10
wp_6101-wxps 4.0 earliest → < 4.0.10 4.0.10
wp_6121-wxps 4.0 earliest → < 4.0.10 4.0.10
Show the 3 other branches
Product Affected versions Fixed in
wp_6156-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6185-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6215-whps 4.0 earliest → < 4.0.10 4.0.10

Other CVEs of WP 6070-WVPS

The 14 CVEs of WP 6070-WVPS →
CVE-2023-37858 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 4.9 Medium CVE-2023-37857 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 3.8 Low CVE-2023-37855 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium CVE-2023-37856 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium
Track this CVE