Description (CNA)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PHOENIX CONTACT / WP 6070-WVPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6101-WXPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6121-WXPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6156-WHPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6185-WHPS | affected 0 before 4.0.10 |
| PHOENIX CONTACT / WP 6215-WHPS | affected 0 before 4.0.10 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.