CVE-2023-37859

🗓️ 09 Aug 2023 06:36:07Reported by CERTVDEType

In PHOENIX CONTACTs WP 6xxx series web panels, versions prior to 4.0.10 allow remote attackers to execute root-level commands

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, arises from insecure management of privileges, allowing attackers to execute arbitrary commands.	28 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-37859	9 Aug 202312:17	–	circl
CNNVD	PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability	9 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-37859 PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels	9 Aug 202306:36	–	cvelist
EUVD	EUVD-2023-41733	3 Oct 202520:07	–	euvd
NVD	CVE-2023-37859	9 Aug 202307:15	–	nvd
Prion	Design/Logic Flaw	9 Aug 202307:15	–	prion
Positive Technologies	PT-2023-4532 · Phoenix Contact · Phoenix Contact Wp 6Xxx Series Web Panels	8 Aug 202300:00	–	ptsecurity

NVD

Vulners

Node

phoenixcontact wp_6070-wvps_firmwareRange<4.0.10

AND

phoenixcontact wp_6070-wvpsMatch-

Node

phoenixcontact wp_6101-wxps_firmwareRange<4.0.10

AND

phoenixcontact wp_6101-wxpsMatch-

Node

phoenixcontact wp_6121-wxps_firmwareRange<4.0.10

AND

phoenixcontact wp_6121-wxpsMatch-

Node

phoenixcontact wp_6156-whps_firmwareRange<4.0.10

AND

phoenixcontact wp_6156-whpsMatch-

Node

phoenixcontact wp_6185-whps_firmwareRange<4.0.10

AND

phoenixcontact wp_6185-whpsMatch-

Node

phoenixcontact wp_6215-whps_firmwareRange<4.0.10

AND

phoenixcontact wp_6215-whpsMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "WP 6070-WVPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6101-WXPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6121-WXPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6156-WHPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6185-WHPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6215-WHPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2023-018/

17 Jun 2026 06:08Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2

EPSS0.00645

CWE-269