Description (CNA)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PHOENIX CONTACT / WP 6070-WVPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6101-WXPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6121-WXPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6156-WHPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6185-WHPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6215-WHPS | affected 0 before 4.0.10 |
CWE
CWE-610
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.