3.8
Faible
CVE-2023-37857 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin…
Description
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing the attacker to create valid session cookies. These session-cookies created by the attacker are not sufficient to obtain a valid session on the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP 6070-WVPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6101-WXPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6121-WXPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6156-WHPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6185-WHPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6215-WHPS 4.0 | premières → < 4.0.10 | 4.0.10 |
Autres CVE de WP 6070-WVPS
Les 14 CVE de WP 6070-WVPS →
CVE-2023-37858
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin…
4.9
Moyenne
CVE-2023-37855
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is…
4.3
Moyenne
CVE-2023-37856
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is…
4.3
Moyenne
CVE-2023-37863
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges…
7.2
Élevée