CVE-2023-37856
4.3MEDIUMIn PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dia
Опубликовано: 8/9/2023Обновлено: 11/21/2024
Описание
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .
ИИ-АнализНа базе ИИ
Затронутые продукты
phoenixcontactwp_6070-wvps_firmware
phoenixcontactwp_6070-wvps
-
phoenixcontactwp_6101-wxps_firmware
phoenixcontactwp_6101-wxps
-
phoenixcontactwp_6121-wxps_firmware
phoenixcontactwp_6121-wxps
-
phoenixcontactwp_6156-whps_firmware
phoenixcontactwp_6156-whps
-
phoenixcontactwp_6185-whps_firmware
phoenixcontactwp_6185-whps
-
phoenixcontactwp_6215-whps_firmware
phoenixcontactwp_6215-whps
-
Ссылки
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory