Vulnerability · Published Aug 9, 2023 · Assigned by CERTVDE
CVE-2023-37861PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
High 8.8
In plain English
A high-severity OS command injection in WP 6070-WVPS from PHOENIX CONTACT. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 40.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHOENIX CONTACT | WP 6070-WVPS | 0 – before 4.0.10 |
| PHOENIX CONTACT | WP 6101-WXPS | 0 – before 4.0.10 |
| PHOENIX CONTACT | WP 6121-WXPS | 0 – before 4.0.10 |
| PHOENIX CONTACT | WP 6156-WHPS | 0 – before 4.0.10 |
| PHOENIX CONTACT | WP 6185-WHPS | 0 – before 4.0.10 |
| PHOENIX CONTACT | WP 6215-WHPS | 0 – before 4.0.10 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H