The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems from PHOENIX CONTACTs WP 6xxx exists due to the lack of measures taken to neutralize special elements used in the operating system command set. This vulnerability allows a perpetrator to execute arbitrary code.

WP 6xxx web panels allow arbitrary code execution via crafted POST requests due to unneutralized OS commands.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-37861	9 Aug 202312:16	–	circl
CNNVD	PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability	9 Aug 202300:00	–	cnnvd
CVE	CVE-2023-37861	9 Aug 202306:34	–	cve
Cvelist	CVE-2023-37861 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels	9 Aug 202306:34	–	cvelist
EUVD	EUVD-2023-41735	3 Oct 202520:07	–	euvd
NVD	CVE-2023-37861	9 Aug 202307:15	–	nvd
OSV	CVE-2023-37861	9 Aug 202307:15	–	osv
Prion	Code injection	9 Aug 202307:15	–	prion
Positive Technologies	PT-2023-4652 · Phoenix Contact · Wp 6Xxx Series Web Panels	8 Aug 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-37861 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels	9 Aug 202306:34	–	vulnrichment