CVE-2023-37856
4.3MEDIUMIn PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dia
Publicado: 8/9/2023Actualizado: 11/21/2024
Descripción
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .
Análisis IAImpulsado por IA
Productos Afectados
phoenixcontactwp_6070-wvps_firmware
phoenixcontactwp_6070-wvps
-
phoenixcontactwp_6101-wxps_firmware
phoenixcontactwp_6101-wxps
-
phoenixcontactwp_6121-wxps_firmware
phoenixcontactwp_6121-wxps
-
phoenixcontactwp_6156-whps_firmware
phoenixcontactwp_6156-whps
-
phoenixcontactwp_6185-whps_firmware
phoenixcontactwp_6185-whps
-
phoenixcontactwp_6215-whps_firmware
phoenixcontactwp_6215-whps
-
Referencias
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory