PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
CVE-2023-37861

8.8HIGH

Key Information:

Vendor
WordPress
Status
WP 6070-wvps
WP 6101-wxps
WP 6121-wxps
WP 6156-wHPs
Vendor
CVE Published:
9 August 2023

Summary

In the WP 6xxx series web panels by PHOENIX CONTACT, versions before 4.0.10 contain a vulnerability that allows an authenticated remote attacker to execute arbitrary code with root privileges. This can be triggered through a specially crafted HTTP POST request during the process of certificate upload to the device, posing significant security risks to the affected systems.

Affected Version(s)

WP 6070-WVPS 0 < 4.0.10

WP 6101-WXPS 0 < 4.0.10

WP 6121-WXPS 0 < 4.0.10

References

https://cert.vde.com/en/advisories/VDE-2023-018/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriele Quagliarella from Nozomi Networks Labs
.