PT-2023-4532 · Phoenix Contact · Phoenix Contact Wp 6Xxx Series Web Panels

Gabriele Quagliarella · Published 2023-08-08 · Updated 2023-08-15 · CVE-2023-37859

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT WP 6xxx series web panels versions prior to 4.0.10

Description The issue is related to the SNMP daemon running with root privileges, allowing a remote attacker with knowledge of the SNMPv2 read/write community string to execute system commands as root. This is due to insecure privilege management in the web panels' firmware.

Recommendations For versions prior to 4.0.10, update to version 4.0.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the SNMP daemon or changing the SNMPv2 read/write community string to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2023-04936

CVE-2023-37859

Affected Products

Phoenix Contact Wp 6Xxx Series Web Panels

References · 8

• https://osv.dev/vulnerability/CVE-2023-37859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37859 · Security Note
• https://bdu.fstec.ru/vul/2023-04936 · Security Note
• https://twitter.com/VulmonFeeds/status/1689228349451689984 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2023-018 · Note
• https://t.me/cibsecurity/68085 · Telegram Post
• https://twitter.com/TechFishNews/status/1689224192661884928 · Twitter Post
• https://t.me/cvenotify/56051 · Telegram Post