Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-37855

PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT WP 6070-WVPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6101-WXPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6121-WXPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6156-WHPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6185-WHPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6215-WHPS

Default version status: unaffected

  • 0 to < 4.0.10affected

References