Skip to content
7.2 High

CVE-2023-37864 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write…

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

Affected products and versions

Product Affected versions Fixed in
WP 6070-WVPS 4.0 earliest → < 4.0.10 4.0.10
WP 6101-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6121-WXPS 4.0 earliest → < 4.0.10 4.0.10
WP 6156-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6185-WHPS 4.0 earliest → < 4.0.10 4.0.10
WP 6215-WHPS 4.0 earliest → < 4.0.10 4.0.10
wp_6070-wvps 4.0 earliest → < 4.0.10 4.0.10
wp_6101-wxps 4.0 earliest → < 4.0.10 4.0.10
wp_6121-wxps 4.0 earliest → < 4.0.10 4.0.10
Show the 3 other branches
Product Affected versions Fixed in
wp_6156-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6185-whps 4.0 earliest → < 4.0.10 4.0.10
wp_6215-whps 4.0 earliest → < 4.0.10 4.0.10
The 14 CVEs of WP 6070-WVPS →
Track this CVE