Description (CNA)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PHOENIX CONTACT / WP 6070-WVPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6101-WXPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6121-WXPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6156-WHPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6185-WHPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6215-WHPS | affected 0 before 4.0.10 |
CWE
CWE-269
References
ADP enrichment
No English description supplied.