Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2023-37864 (GCVE-0-2023-37864)

Vulnerability from nvd – Published: 2023-08-09 06:35 – Updated: 2024-10-10 17:34

Title

PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:27 UTC

CWE

CWE-494 - Download of Code Without Integrity Check

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37864",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:27:32.978485Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:34:41.503Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges\u0026nbsp;may use an a special SNMP request to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges\u00a0may use an a special SNMP request to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-494",
              "description": "CWE-494 Download of Code Without Integrity Check",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-09T06:35:48.425Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37864",
    "datePublished": "2023-08-09T06:35:48.425Z",
    "dateReserved": "2023-07-10T07:53:04.116Z",
    "dateUpdated": "2024-10-10T17:34:41.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37862 (GCVE-0-2023-37862)

Vulnerability from nvd – Published: 2023-08-09 06:35 – Updated: 2024-10-10 17:43

Title

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:36 UTC

CWE

CWE-862 - Missing Authorization

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.744Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37862",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:36:26.292093Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:43:31.957Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-09T06:35:14.704Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37862",
    "datePublished": "2023-08-09T06:35:14.704Z",
    "dateReserved": "2023-07-10T07:53:04.115Z",
    "dateUpdated": "2024-10-10T17:43:31.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37861 (GCVE-0-2023-37861)

Vulnerability from nvd – Published: 2023-08-09 06:34 – Updated: 2024-10-10 17:59

Title

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:52 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.639Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37861",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:52:10.296158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:59:20.403Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-09T06:34:36.113Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37861",
    "datePublished": "2023-08-09T06:34:36.113Z",
    "dateReserved": "2023-07-10T07:53:04.115Z",
    "dateUpdated": "2024-10-10T17:59:20.403Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37860 (GCVE-0-2023-37860)

Vulnerability from nvd – Published: 2023-08-09 06:34 – Updated: 2024-10-10 17:50

Title

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:44 UTC

CWE

CWE-862 - Missing Authorization

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.590Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:44:46.862605Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:50:45.168Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.\u003cbr\u003e"
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-25T06:32:01.495Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37860",
    "datePublished": "2023-08-09T06:34:56.332Z",
    "dateReserved": "2023-07-10T07:53:04.115Z",
    "dateUpdated": "2024-10-10T17:50:45.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3573 (GCVE-0-2023-3573)

Vulnerability from nvd – Published: 2023-08-08 06:51 – Updated: 2024-10-15 19:23

Title

PHOENIX CONTACT: Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-15 19:19 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:57.067Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3573",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T19:19:48.569897Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T19:23:30.106Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations\u0026nbsp;to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations\u00a0to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-25T06:08:43.409Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-3573",
    "datePublished": "2023-08-08T06:51:34.335Z",
    "dateReserved": "2023-07-10T07:53:14.441Z",
    "dateUpdated": "2024-10-15T19:23:30.106Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3572 (GCVE-0-2023-3572)

Vulnerability from nvd – Published: 2023-08-08 06:52 – Updated: 2024-10-15 19:18

Title

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-15 19:14 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , ≤ 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:55.922Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThanOrEqual": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3572",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T19:14:50.910247Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T19:18:16.801Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-08T08:12:15.705Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-3572",
    "datePublished": "2023-08-08T06:52:29.820Z",
    "dateReserved": "2023-07-10T07:53:13.476Z",
    "dateUpdated": "2024-10-15T19:18:16.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3570 (GCVE-0-2023-3570)

Vulnerability from nvd – Published: 2023-08-08 06:52 – Updated: 2024-10-15 19:13

Title

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-15 19:09 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:55.948Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3570",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T19:09:27.526246Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T19:13:29.756Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-25T06:07:25.366Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-3570",
    "datePublished": "2023-08-08T06:52:57.641Z",
    "dateReserved": "2023-07-10T07:53:11.063Z",
    "dateUpdated": "2024-10-15T19:13:29.756Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37864 (GCVE-0-2023-37864)

Vulnerability from cvelistv5 – Published: 2023-08-09 06:35 – Updated: 2024-10-10 17:34

Title

PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:27 UTC

CWE

CWE-494 - Download of Code Without Integrity Check

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37864",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:27:32.978485Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:34:41.503Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges\u0026nbsp;may use an a special SNMP request to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges\u00a0may use an a special SNMP request to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-494",
              "description": "CWE-494 Download of Code Without Integrity Check",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-09T06:35:48.425Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37864",
    "datePublished": "2023-08-09T06:35:48.425Z",
    "dateReserved": "2023-07-10T07:53:04.116Z",
    "dateUpdated": "2024-10-10T17:34:41.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37862 (GCVE-0-2023-37862)

Vulnerability from cvelistv5 – Published: 2023-08-09 06:35 – Updated: 2024-10-10 17:43

Title

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:36 UTC

CWE

CWE-862 - Missing Authorization

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.744Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37862",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:36:26.292093Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:43:31.957Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-09T06:35:14.704Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37862",
    "datePublished": "2023-08-09T06:35:14.704Z",
    "dateReserved": "2023-07-10T07:53:04.115Z",
    "dateUpdated": "2024-10-10T17:43:31.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37860 (GCVE-0-2023-37860)

Vulnerability from cvelistv5 – Published: 2023-08-09 06:34 – Updated: 2024-10-10 17:50

Title

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:44 UTC

CWE

CWE-862 - Missing Authorization

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.590Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:44:46.862605Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:50:45.168Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.\u003cbr\u003e"
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-25T06:32:01.495Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37860",
    "datePublished": "2023-08-09T06:34:56.332Z",
    "dateReserved": "2023-07-10T07:53:04.115Z",
    "dateUpdated": "2024-10-10T17:50:45.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-37861 (GCVE-0-2023-37861)

Vulnerability from cvelistv5 – Published: 2023-08-09 06:34 – Updated: 2024-10-10 17:59

Title

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:52 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:23:27.639Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-37861",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:52:10.296158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T17:59:20.403Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-09T06:34:36.113Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-37861",
    "datePublished": "2023-08-09T06:34:36.113Z",
    "dateReserved": "2023-07-10T07:53:04.115Z",
    "dateUpdated": "2024-10-10T17:59:20.403Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3570 (GCVE-0-2023-3570)

Vulnerability from cvelistv5 – Published: 2023-08-08 06:52 – Updated: 2024-10-15 19:13

Title

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-15 19:09 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:55.948Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3570",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T19:09:27.526246Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T19:13:29.756Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-25T06:07:25.366Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-3570",
    "datePublished": "2023-08-08T06:52:57.641Z",
    "dateReserved": "2023-07-10T07:53:11.063Z",
    "dateUpdated": "2024-10-15T19:13:29.756Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3572 (GCVE-0-2023-3572)

Vulnerability from cvelistv5 – Published: 2023-08-08 06:52 – Updated: 2024-10-15 19:18

Title

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-15 19:14 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , ≤ 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:55.922Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThanOrEqual": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3572",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T19:14:50.910247Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T19:18:16.801Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-08T08:12:15.705Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-3572",
    "datePublished": "2023-08-08T06:52:29.820Z",
    "dateReserved": "2023-07-10T07:53:13.476Z",
    "dateUpdated": "2024-10-15T19:18:16.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3573 (GCVE-0-2023-3573)

Vulnerability from cvelistv5 – Published: 2023-08-08 06:51 – Updated: 2024-10-15 19:23

Title

PHOENIX CONTACT: Command Injection in WP 6xxx Web panels

Summary

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-15 19:19 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2023-018/

Impacted products

12 products

Vendor	Product	Version
PHOENIX CONTACT	WP 6070-WVPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6101-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6121-WXPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6156-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6185-WHPS	Affected: 0 , < 4.0.10 (semver)
PHOENIX CONTACT	WP 6215-WHPS	Affected: 0 , < 4.0.10 (semver)
phoenixcontact	wp_6070-wvps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:::::::*
phoenixcontact	wp_6101-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:::::::*
phoenixcontact	wp_6121-wxps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:::::::*
phoenixcontact	wp_6156-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6156-whps:-:::::::*
phoenixcontact	wp_6185-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6185-whps:-:::::::*
phoenixcontact	wp_6215-whps	Affected: 0 , < 4.0.10 (semver) cpe:2.3:h:phoenixcontact:wp_6215-whps:-:::::::*

Date Public

2023-08-08 06:45

Credits

Gabriele Quagliarella from Nozomi Networks Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:57.067Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6070-wvps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6070-wvps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6101-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6101-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6121-wxps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6121-wxps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6156-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6156-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6185-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:phoenixcontact:wp_6215-whps:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wp_6215-whps",
            "vendor": "phoenixcontact",
            "versions": [
              {
                "lessThan": "4.0.10",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3573",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T19:19:48.569897Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T19:23:30.106Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WP 6070-WVPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6101-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6121-WXPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6156-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6185-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP 6215-WHPS",
          "vendor": "PHOENIX CONTACT",
          "versions": [
            {
              "lessThan": "4.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Gabriele Quagliarella from Nozomi Networks Labs"
        }
      ],
      "datePublic": "2023-08-08T06:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations\u0026nbsp;to gain full access to the device."
            }
          ],
          "value": "In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations\u00a0to gain full access to the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-25T06:08:43.409Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://cert.vde.com/en/advisories/VDE-2023-018/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-018",
        "defect": [
          "CERT@VDE#64468"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "PHOENIX CONTACT: Command Injection in WP 6xxx Web panels",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-3573",
    "datePublished": "2023-08-08T06:51:34.335Z",
    "dateReserved": "2023-07-10T07:53:14.441Z",
    "dateUpdated": "2024-10-15T19:23:30.106Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria

14 vulnerabilities found for wp_6185-whps by phoenixcontact

CVE-2023-37864 (GCVE-0-2023-37864)

CVE-2023-37862 (GCVE-0-2023-37862)

CVE-2023-37861 (GCVE-0-2023-37861)

CVE-2023-37860 (GCVE-0-2023-37860)

CVE-2023-3573 (GCVE-0-2023-3573)

CVE-2023-3572 (GCVE-0-2023-3572)

CVE-2023-3570 (GCVE-0-2023-3570)

CVE-2023-37864 (GCVE-0-2023-37864)

CVE-2023-37862 (GCVE-0-2023-37862)

CVE-2023-37860 (GCVE-0-2023-37860)

CVE-2023-37861 (GCVE-0-2023-37861)

CVE-2023-3570 (GCVE-0-2023-3570)

CVE-2023-3572 (GCVE-0-2023-3572)

CVE-2023-3573 (GCVE-0-2023-3573)