Skip to content
Sign in
8.2 High

CVE-2023-37862 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can…

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.

Affected products and versions

Product Affected versions Fixed in
WP 6070-WVPS 4.0 earliest → < 4.0.10 4.0.10
WP 6101-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6121-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6156-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6185-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6215-WHPS 4.0 earliest → < 4.0.10 4.0.10
wp_6070-wvps 4.0 earliest → < 4.0.10 4.0.10
wp_6101-wxps 4.0 earliest → < 4.0.10 4.0.10
wp_6121-wxps 4.0 earliest → < 4.0.10 4.0.10
Show the 3 other branches
Product Affected versions Fixed in
wp_6156-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6185-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6215-whps 4.0 earliest → < 4.0.10 4.0.10

Other CVEs of WP 6070-WVPS

The 14 CVEs of WP 6070-WVPS →
CVE-2023-37858 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 4.9 Medium CVE-2023-37857 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 3.8 Low CVE-2023-37855 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium CVE-2023-37856 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium
Track this CVE