PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs. A security vulnerability in PHOENIX CONTACTs WP 6xxx series web panels prior to version 4.0.10 exists in the web panels where a remote attacker with low privileges can gain limited read access to the devi...

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACT WP 6xxx series versions prior to 4.0.10, which originates in the web panels, where a remote attacker with low privileges can gain limited read...

CVE-2023-3570

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device...

CVE-2023-3571

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device...

CVE-2023-3571

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device...

Command injection

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

Cross site request forgery (csrf)

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

Design/Logic Flaw

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device...

CVE-2023-3570

Affected software: PHOENIX CONTACT WP 6xxx series web panels, versions before 4.0.10. The root cause is an OS command injection/unauthorized command handling allowing a remote attacker with LOW privileges to send a crafted HTTP DELETE request to gain full control of the device. Impact is full dev...

CVE-2023-3570 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device...

CVE-2023-3572 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3572 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3572

CVE-2023-3572 affects PHOENIX CONTACTs WP 6xxx series web panels prior to v4.0.10. A remote, unauthenticated attacker can exploit an HTTP POST attribute related to date/time operations to perform OS command injection and gain full device access. This is documented across multiple sources (NVD/NIS...

CVE-2023-3571

The CVE concerns PHOENIX CONTACT WP 6xxx series web panels (pre-4.0.10). An OS command injection flaw arises from insufficient input handling, allowing a remote, low-privileged attacker to leverage a specific HTTP POST related to certificate operations to gain full device access. Affected: WP 6xx...

CVE-2023-3573 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

CVE-2023-3573

CVE-2023-3573 describes a command-injection vulnerability in PHOENIX CONTACT WP 6xxx series web panels, present in versions prior to 4.0.10. A remote attacker with low privileges can exploit an HTTP POST request related to font configuration operations to gain full control of the device. Impact i...

CVE-2023-3573 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device...

PT-2023-4652 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute...

PT-2023-4198 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: A remote, unauthenticated attacker may use an attribute of a specific HTTP POST request related to date/time operations to gain full access to the device. The...

PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels is a series of web panels from PHOENIX CONTACTs, Germany. An operating system command injection vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10, which originates from a low-privileged remote attacker who could...