NetSight
medium4.3

CVE-2023-37855

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the devi…

Impact

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser.

Affected products

VendorProductAffected versions
PhoenixcontactWp 6070-Wvps Firmware
before 4.0.10
PhoenixcontactWp 6101-Wxps Firmware
before 4.0.10
PhoenixcontactWp 6121-Wxps Firmware
before 4.0.10
PhoenixcontactWp 6156-Whps Firmware
before 4.0.10
PhoenixcontactWp 6185-Whps Firmware
before 4.0.10
PhoenixcontactWp 6215-Whps Firmware
before 4.0.10

Weakness classification

References