Lucene search
HistoryAug 09, 2023 - 7:15 a.m.
CVE-2023-37859
cve-2023-37859
snmp daemon
root privileges
remote attacker
system commands
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
56.2%
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.
Affected configurations
Node
phoenixcontactwp_6070-wvpsMatch-
phoenixcontactwp_6070-wvps_firmwareRange<4.0.10
Node
phoenixcontactwp_6101-wxpsMatch-
phoenixcontactwp_6101-wxps_firmwareRange<4.0.10
Node
phoenixcontactwp_6121-wxpsMatch-
phoenixcontactwp_6121-wxps_firmwareRange<4.0.10
Node
phoenixcontactwp_6156-whpsMatch-
phoenixcontactwp_6156-whps_firmwareRange<4.0.10
Node
phoenixcontactwp_6185-whpsMatch-
phoenixcontactwp_6185-whps_firmwareRange<4.0.10
Node
phoenixcontactwp_6215-whpsMatch-
phoenixcontactwp_6215-whps_firmwareRange<4.0.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phoenixcontact | wp_6070-wvps | - | cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:* |
| phoenixcontact | wp_6070-wvps_firmware | * | cpe:2.3:o:phoenixcontact:wp_6070-wvps_firmware:*:*:*:*:*:*:*:* |
| phoenixcontact | wp_6101-wxps | - | cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:* |
| phoenixcontact | wp_6101-wxps_firmware | * | cpe:2.3:o:phoenixcontact:wp_6101-wxps_firmware:*:*:*:*:*:*:*:* |
| phoenixcontact | wp_6121-wxps | - | cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:* |
| phoenixcontact | wp_6121-wxps_firmware | * | cpe:2.3:o:phoenixcontact:wp_6121-wxps_firmware:*:*:*:*:*:*:*:* |
| phoenixcontact | wp_6156-whps | - | cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:* |
| phoenixcontact | wp_6156-whps_firmware | * | cpe:2.3:o:phoenixcontact:wp_6156-whps_firmware:*:*:*:*:*:*:*:* |
| phoenixcontact | wp_6185-whps | - | cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:* |
| phoenixcontact | wp_6185-whps_firmware | * | cpe:2.3:o:phoenixcontact:wp_6185-whps_firmware:*:*:*:*:*:*:*:* |
References
Related
prion
prion
Design/Logic Flaw
2023-08-09 07:15:00
cvelist
cvelist
cve
cve
CVE-2023-37859
2023-08-09 07:15:10
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
56.2%
Related for NVD:CVE-2023-37859