Advisories · Technology

PHOENIX CONTACT WP 6185-WHPS.

Every CVE that names PHOENIX CONTACT WP 6185-WHPS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-37858 CVE record

CVSS 4.9 Medium

PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Weak cryptography or TLS
Not analysed yet 9 Aug 2023
CVE-2023-37857 CVE record

CVSS 3.8 Low

PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Hard-coded credentials
Not analysed yet 9 Aug 2023
CVE-2023-37855 CVE record

CVSS 4.3 Medium

PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- CWE-610
Not analysed yet 9 Aug 2023
CVE-2023-37856 CVE record

CVSS 4.3 Medium

PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- CWE-610
Not analysed yet 9 Aug 2023
CVE-2023-37863 CVE record

CVSS 7.2 High

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Command injection
Not analysed yet 9 Aug 2023
CVE-2023-37859 CVE record

CVSS 7.2 High

PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Privilege escalation
Not analysed yet 9 Aug 2023
CVE-2023-37864 CVE record

CVSS 7.2 High

PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- CWE-494
Not analysed yet 9 Aug 2023
CVE-2023-37862 CVE record

CVSS 8.2 High

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Broken access control
Not analysed yet 9 Aug 2023
CVE-2023-37860 CVE record

CVSS 7.5 High

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Broken access control
Not analysed yet 9 Aug 2023
CVE-2023-37861 CVE record

CVSS 8.8 High

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Command injection
Not analysed yet 9 Aug 2023
CVE-2023-3570 CVE record

CVSS 8.8 High

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Command injection
Not analysed yet 8 Aug 2023
CVE-2023-3572 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Command injection
Not analysed yet 8 Aug 2023
CVE-2023-3571 CVE record

CVSS 8.8 High

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Command injection
Not analysed yet 8 Aug 2023
CVE-2023-3573 CVE record

CVSS 8.8 High

PHOENIX CONTACT: Command Injection in WP 6xxx Web panels
- PHOENIX CONTACT WP 6070-WVPS
- PHOENIX CONTACT WP 6101-WXPS
- Command injection
Not analysed yet 8 Aug 2023