Lucene search
HistoryAug 09, 2023 - 7:15 a.m.
CVE-2023-37860
vulnerability
phoenix contact
web panels
snmpv2
r/w community string
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
44.4%
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.
Affected configurations
Node
phoenixcontactwp_6070-wvpsMatch-
phoenixcontactwp_6070-wvps_firmwareRange<4.0.10
Node
phoenixcontactwp_6101-wxpsMatch-
phoenixcontactwp_6101-wxps_firmwareRange<4.0.10
Node
phoenixcontactwp_6121-wxpsMatch-
phoenixcontactwp_6121-wxps_firmwareRange<4.0.10
Node
phoenixcontactwp_6156-whpsMatch-
phoenixcontactwp_6156-whps_firmwareRange<4.0.10
Node
phoenixcontactwp_6185-whpsMatch-
phoenixcontactwp_6185-whps_firmwareRange<4.0.10
Node
phoenixcontactwp_6215-whpsMatch-
phoenixcontactwp_6215-whps_firmwareRange<4.0.10
References
Related
cve
cve
CVE-2023-37860
2023-08-09 07:15:10
cvelist
cvelist
CVE-2023-37860 PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels
2023-08-09 06:34:56
prion
prion
Code injection
2023-08-09 07:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
44.4%
Related for NVD:CVE-2023-37860