Lucene search
HistoryAug 09, 2023 - 7:15 a.m.
CVE-2023-37863
cve-2023-37863
remote attacker
snmpv2
write privileges
special snmp request
full access
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.8%
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.
Affected configurations
Node
phoenixcontactwp_6070-wvps_firmwareRange<4.0.10
phoenixcontactwp_6070-wvpsMatch-
Node
phoenixcontactwp_6101-wxps_firmwareRange<4.0.10
phoenixcontactwp_6101-wxpsMatch-
Node
phoenixcontactwp_6121-wxps_firmwareRange<4.0.10
phoenixcontactwp_6121-wxpsMatch-
Node
phoenixcontactwp_6156-whps_firmwareRange<4.0.10
phoenixcontactwp_6156-whpsMatch-
Node
phoenixcontactwp_6185-whps_firmwareRange<4.0.10
phoenixcontactwp_6185-whpsMatch-
Node
phoenixcontactwp_6215-whps_firmwareRange<4.0.10
phoenixcontactwp_6215-whpsMatch-
References
Related
cve
cve
CVE-2023-37863
2023-08-09 07:15:11
cvelist
cvelist
CVE-2023-37863 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
2023-08-09 06:36:28
prion
prion
Cross site request forgery (csrf)
2023-08-09 07:15:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.8%
Related for NVD:CVE-2023-37863