Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 42

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00933 Published 2023-08-08 Fixed in 4.0.10 CWE-78
Priority MEDIUM 51

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to th…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01046 Published 2023-08-08 Fixed in 4.0.10 CWE-78
Priority MEDIUM 41

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0059 Published 2023-08-08 Fixed in 4.0.10 CWE-78
Priority MEDIUM 43

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full ac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01243 Published 2023-08-08 Fixed in 4.0.10 CWE-78