Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-37862

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.

Published

2023-08-09T07:15:11.133

Last Modified

2024-11-21T08:12:20.647

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.2 (HIGH)

Weaknesses
  • Type: Primary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System phoenixcontact wp_6070-wvps_firmware < 4.0.10 Yes
Hardware phoenixcontact wp_6070-wvps - No
Operating System phoenixcontact wp_6101-wxps_firmware < 4.0.10 Yes
Hardware phoenixcontact wp_6101-wxps - No
Operating System phoenixcontact wp_6121-wxps_firmware < 4.0.10 Yes
Hardware phoenixcontact wp_6121-wxps - No
Operating System phoenixcontact wp_6156-whps_firmware < 4.0.10 Yes
Hardware phoenixcontact wp_6156-whps - No
Operating System phoenixcontact wp_6185-whps_firmware < 4.0.10 Yes
Hardware phoenixcontact wp_6185-whps - No
Operating System phoenixcontact wp_6215-whps_firmware < 4.0.10 Yes
Hardware phoenixcontact wp_6215-whps - No
References