CVE-2023-37855
4.3MEDIUMIn PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt brow
Published: 8/9/2023Updated: 11/21/2024
Description
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser.
AI AnalysisPowered by AI
Affected Products
phoenixcontactwp_6070-wvps_firmware
phoenixcontactwp_6070-wvps
-
phoenixcontactwp_6101-wxps_firmware
phoenixcontactwp_6101-wxps
-
phoenixcontactwp_6121-wxps_firmware
phoenixcontactwp_6121-wxps
-
phoenixcontactwp_6156-whps_firmware
phoenixcontactwp_6156-whps
-
phoenixcontactwp_6185-whps_firmware
phoenixcontactwp_6185-whps
-
phoenixcontactwp_6215-whps_firmware
phoenixcontactwp_6215-whps
-
References
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory