by Kastro
Paper/Archive/CVE-2023-3572

CVE-2023-3572

PHOENIX CONTACT WP 6070-WVPS — PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

EPSS 1%CVSS 10.0
critical.is priorityof 100
43
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 64.2.642 × 2012.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.

Affected

ProductAffectedFixed inSource
WP 6070-WVPS< 4.0.104.0.10CNA
WP 6101-WXPS< 4.0.104.0.10CNA
WP 6121-WXPS< 4.0.104.0.10CNA
WP 6156-WHPS< 4.0.104.0.10CNA
WP 6185-WHPS< 4.0.104.0.10CNA
WP 6215-WHPS< 4.0.104.0.10CNA
wp_6070-wvps< 4.0.104.0.10CISA-ADP
wp_6101-wxps< 4.0.104.0.10CISA-ADP
wp_6121-wxps≤ 4.0.10–CISA-ADP
wp_6156-whps< 4.0.104.0.10CISA-ADP
wp_6156-whps< 4.0.104.0.10CISA-ADP
wp_6185-whps< 4.0.104.0.10CISA-ADP

Scores by source

CERTVDE (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcert.vde.com/en/advisories/VDE-2023-018