← CVE Intelligence

CVE-2023-37863

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels PUBLISHED

Description (CNA)

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / WP 6070-WVPSaffected 0 before 4.0.10
PHOENIX CONTACT / WP 6101-WXPSaffected 0 before 4.0.10
PHOENIX CONTACT / WP 6121-WXPSaffected 0 before 4.0.10
PHOENIX CONTACT / WP 6156-WHPSaffected 0 before 4.0.10
PHOENIX CONTACT / WP 6185-WHPSaffected 0 before 4.0.10
PHOENIX CONTACT / WP 6215-WHPSaffected 0 before 4.0.10

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.