CVE-2023-37860

🗓️ 09 Aug 2023 06:34:56Reported by CERTVDEType

In PHOENIX CONTACTs WP 6xxx series web panels, remote attacker can obtain SNMPv2 community string (CVE-2023-37860

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	PHOENIX CONTACT WP 6xxx Auth Bypass	28 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-37860	9 Aug 202312:16	–	circl
CNNVD	PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability	9 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-37860 PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels	9 Aug 202306:34	–	cvelist
EUVD	EUVD-2023-41734	3 Oct 202520:07	–	euvd
NVD	CVE-2023-37860	9 Aug 202307:15	–	nvd
osv_cve	CVE-2023-37860	9 Aug 202307:15	–	osv_cve
Prion	Code injection	9 Aug 202307:15	–	prion
Positive Technologies	PT-2023-4518	8 Aug 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2023-37860: Missing Authorization	9 Aug 202300:00	–	rapid7

NVD

Vulners

Vulnrichment

Node

AND

phoenixcontact wp_6070-wvps_firmwareRange<4.0.10

phoenixcontact wp_6070-wvpsMatch-

Node

AND

phoenixcontact wp_6101-wxps_firmwareRange<4.0.10

phoenixcontact wp_6101-wxpsMatch-

Node

AND

phoenixcontact wp_6121-wxps_firmwareRange<4.0.10

phoenixcontact wp_6121-wxpsMatch-

Node

AND

phoenixcontact wp_6156-whps_firmwareRange<4.0.10

phoenixcontact wp_6156-whpsMatch-

Node

AND

phoenixcontact wp_6185-whps_firmwareRange<4.0.10

phoenixcontact wp_6185-whpsMatch-

Node

AND

phoenixcontact wp_6215-whps_firmwareRange<4.0.10

phoenixcontact wp_6215-whpsMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "WP 6070-WVPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6101-WXPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6121-WXPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6156-WHPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6185-WHPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WP 6215-WHPS",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "4.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2023-018/

17 Jun 2026 06:08Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00805

SSVC

CWE-862