CVE-2023-3571

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device...

CVE-2023-3573

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

CVE-2023-3572

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3571

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device...

CVE-2023-3570

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device...

Cross site request forgery (csrf)

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

Design/Logic Flaw

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device...

Command injection

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

CVE-2023-3570

Affected software: PHOENIX CONTACT WP 6xxx series web panels, versions before 4.0.10. The root cause is an OS command injection/unauthorized command handling allowing a remote attacker with LOW privileges to send a crafted HTTP DELETE request to gain full control of the device. Impact is full dev...

CVE-2023-3570 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device...

CVE-2023-3572 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3572 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3572

CVE-2023-3572 affects PHOENIX CONTACTs WP 6xxx series web panels prior to v4.0.10. A remote, unauthenticated attacker can exploit an HTTP POST attribute related to date/time operations to perform OS command injection and gain full device access. This is documented across multiple sources (NVD/NIS...

CVE-2023-3571

The CVE concerns PHOENIX CONTACT WP 6xxx series web panels (pre-4.0.10). An OS command injection flaw arises from insufficient input handling, allowing a remote, low-privileged attacker to leverage a specific HTTP POST related to certificate operations to gain full device access. Affected: WP 6xx...

CVE-2023-3573 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

CVE-2023-3573

CVE-2023-3573 describes a command-injection vulnerability in PHOENIX CONTACT WP 6xxx series web panels, present in versions prior to 4.0.10. A remote attacker with low privileges can exploit an HTTP POST request related to font configuration operations to gain full control of the device. Impact i...

CVE-2023-3573 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

PT-2023-4652 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute...

PT-2023-4198 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: A remote, unauthenticated attacker may use an attribute of a specific HTTP POST request related to date/time operations to gain full access to the device. The...

PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels is a series of web panels from PHOENIX CONTACTs, Germany. An operating system command injection vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10, which originates from a low-privileged remote attacker who could...