4.9
Moyenne
CVE-2023-37858 In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin…
Description
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing to decrypt an encrypted web application login password.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP 6070-WVPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6101-WXPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6121-WXPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6156-WHPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6185-WHPS 4.0 | premières → < 4.0.10 | 4.0.10 |
| WP 6215-WHPS 4.0 | premières → < 4.0.10 | 4.0.10 |
Autres CVE de WP 6070-WVPS
Les 14 CVE de WP 6070-WVPS →
CVE-2023-37857
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin…
3.8
Faible
CVE-2023-37855
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is…
4.3
Moyenne
CVE-2023-37856
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is…
4.3
Moyenne
CVE-2023-37863
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges…
7.2
Élevée