Lucene search

K

[email protected]NVD:CVE-2023-3571

HistoryAug 08, 2023 - 7:15 a.m.

CVE-2023-3571

2023-08-0807:15:10

CWE-78

[email protected]

web.nvd.nist.gov

phoenix contact

web panels

remote attacker

certificate operations

full access

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.

Affected configurations

NVD

Node

phoenixcontactwp_6070-wvps_firmwareRange<4.0.10

AND

phoenixcontactwp_6070-wvpsMatch-

Node

phoenixcontactwp_6101-wxps_firmwareRange<4.0.10

AND

phoenixcontactwp_6101-wxpsMatch-

Node

phoenixcontactwp_6121-wxps_firmwareRange<4.0.10

AND

phoenixcontactwp_6121-wxpsMatch-

Node

phoenixcontactwp_6156-whps_firmwareRange<4.0.10

AND

phoenixcontactwp_6156-whpsMatch-

Node

phoenixcontactwp_6185-whps_firmwareRange<4.0.10

AND

phoenixcontactwp_6185-whpsMatch-

Node

phoenixcontactwp_6215-whps_firmwareRange<4.0.10

AND

phoenixcontactwp_6215-whpsMatch-

References

cert.vde.com/en/advisories/VDE-2023-018/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

Related for NVD:CVE-2023-3571

prion1 cve1 cvelist1