Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-37860

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT WP 6070-WVPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6101-WXPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6121-WXPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6156-WHPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6185-WHPS

Default version status: unaffected

  • 0 to < 4.0.10affected

PHOENIX CONTACT WP 6215-WHPS

Default version status: unaffected

  • 0 to < 4.0.10affected

References