Skip to content
Sign in
8.8 High

CVE-2023-3571 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may…

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.

Affected products and versions

Product Affected versions Fixed in
WP 6070-WVPS 4.0 earliest → < 4.0.10 4.0.10
WP 6101-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6121-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6156-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6185-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6215-WHPS 4.0 earliest → < 4.0.10 4.0.10
wp_6070-wvps_firmware 4.0 earliest → < 4.0.10 4.0.10
wp_6101-wxps_firmware 4.0 earliest → < 4.0.10 4.0.10
wp_6121-wxps_firmware 4.0 earliest → < 4.0.10 4.0.10
Show the 3 other branches
Product Affected versions Fixed in
wp_6156-whps_firmware 4.0 earliest → < 4.0.10 4.0.10
wp_6185-whps_firmware 4.0 earliest → < 4.0.10 4.0.10
wp_6215-whps_firmware 4.0 earliest → < 4.0.10 4.0.10

Other CVEs of WP 6070-WVPS

The 14 CVEs of WP 6070-WVPS →
CVE-2023-37858 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 4.9 Medium CVE-2023-37857 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin… 3.8 Low CVE-2023-37855 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium CVE-2023-37856 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is… 4.3 Medium
Track this CVE