Lucene search
HistoryAug 09, 2023 - 7:15 a.m.
CVE-2023-37864
cve-2023-37864
remote attacker
snmpv2
full access
device
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
41.7%
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.
Affected configurations
Node
phoenixcontactwp_6070-wvps_firmwareRange<4.0.10
phoenixcontactwp_6070-wvpsMatch-
Node
phoenixcontactwp_6101-wxps_firmwareRange<4.0.10
phoenixcontactwp_6101-wxpsMatch-
Node
phoenixcontactwp_6121-wxps_firmwareRange<4.0.10
phoenixcontactwp_6121-wxpsMatch-
Node
phoenixcontactwp_6156-whps_firmwareRange<4.0.10
phoenixcontactwp_6156-whpsMatch-
Node
phoenixcontactwp_6185-whps_firmwareRange<4.0.10
phoenixcontactwp_6185-whpsMatch-
Node
phoenixcontactwp_6215-whps_firmwareRange<4.0.10
phoenixcontactwp_6215-whpsMatch-
References
Related
cve
cve
CVE-2023-37864
2023-08-09 07:15:11
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-08-09 07:15:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
41.7%
Related for NVD:CVE-2023-37864