cveboard RSS feed

CVE-2023-37861

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WP 6070-WVPS

Vendor
PHOENIX CONTACT
Product
WP 6070-WVPS
Platforms
Unknown
Default status
unaffected
WP 6070-WVPS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver4.0.10UnavailableNone listed

WP 6101-WXPS

Vendor
PHOENIX CONTACT
Product
WP 6101-WXPS
Platforms
Unknown
Default status
unaffected
WP 6101-WXPS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver4.0.10UnavailableNone listed

WP 6121-WXPS

Vendor
PHOENIX CONTACT
Product
WP 6121-WXPS
Platforms
Unknown
Default status
unaffected
WP 6121-WXPS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver4.0.10UnavailableNone listed

WP 6156-WHPS

Vendor
PHOENIX CONTACT
Product
WP 6156-WHPS
Platforms
Unknown
Default status
unaffected
WP 6156-WHPS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver4.0.10UnavailableNone listed

WP 6185-WHPS

Vendor
PHOENIX CONTACT
Product
WP 6185-WHPS
Platforms
Unknown
Default status
unaffected
WP 6185-WHPS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver4.0.10UnavailableNone listed

WP 6215-WHPS

Vendor
PHOENIX CONTACT
Product
WP 6215-WHPS
Platforms
Unknown
Default status
unaffected
WP 6215-WHPS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver4.0.10UnavailableNone listed