CVE-2023-37860

published 2023-08-09

CVE-2023-37860: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
phoenix_contact	wp_6070-wvps	< 4.0.10	4.0.10
phoenix_contact	wp_6101-wxps	< 4.0.10	4.0.10
phoenix_contact	wp_6121-wxps	< 4.0.10	4.0.10
phoenix_contact	wp_6156-whps	< 4.0.10	4.0.10
phoenix_contact	wp_6185-whps	< 4.0.10	4.0.10
phoenix_contact	wp_6215-whps	< 4.0.10	4.0.10
phoenixcontact	wp_6070-wvps_firmware	< 4.0.10	4.0.10
phoenixcontact	wp_6101-wxps_firmware	< 4.0.10	4.0.10
phoenixcontact	wp_6121-wxps_firmware	< 4.0.10	4.0.10
phoenixcontact	wp_6156-whps_firmware	< 4.0.10	4.0.10
phoenixcontact	wp_6185-whps_firmware	< 4.0.10	4.0.10
phoenixcontact	wp_6215-whps_firmware	< 4.0.10	4.0.10

CWE-862