CVE-2023-37859
PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.0.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.
Timeline
- CVE published
- Record last updated
Affected versions
- PHOENIX CONTACT WP 6070-WVPS
fixed in 4.0.10
- PHOENIX CONTACT WP 6101-WXPS
fixed in 4.0.10
- PHOENIX CONTACT WP 6121-WXPS
fixed in 4.0.10
- PHOENIX CONTACT WP 6156-WHPS
fixed in 4.0.10
- PHOENIX CONTACT WP 6185-WHPS
fixed in 4.0.10
- PHOENIX CONTACT WP 6215-WHPS
fixed in 4.0.10