描述
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .
AI分析AI驱动
受影响产品
phoenixcontactwp_6070-wvps_firmware
phoenixcontactwp_6070-wvps
-
phoenixcontactwp_6101-wxps_firmware
phoenixcontactwp_6101-wxps
-
phoenixcontactwp_6121-wxps_firmware
phoenixcontactwp_6121-wxps
-
phoenixcontactwp_6156-whps_firmware
phoenixcontactwp_6156-whps
-
phoenixcontactwp_6185-whps_firmware
phoenixcontactwp_6185-whps
-
phoenixcontactwp_6215-whps_firmware
phoenixcontactwp_6215-whps
-
参考资料
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-018/Third Party Advisory