Description
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
PHOENIX CONTACT WP 6070-WVPS
Default version status: unaffected
0 to < 4.0.10affected
PHOENIX CONTACT WP 6101-WXPS
Default version status: unaffected
0 to < 4.0.10affected
PHOENIX CONTACT WP 6121-WXPS
Default version status: unaffected
0 to < 4.0.10affected
PHOENIX CONTACT WP 6156-WHPS
Default version status: unaffected
0 to < 4.0.10affected
PHOENIX CONTACT WP 6185-WHPS
Default version status: unaffected
0 to < 4.0.10affected
PHOENIX CONTACT WP 6215-WHPS
Default version status: unaffected
0 to < 4.0.10affected