ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-37858

—
CVSS 3.1
4.9 medium
EPSS
<1%p38
Published
()
Modified
Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing to decrypt an encrypted web application login password.

Vendors
phoenixcontact
Products
wp 6070-wvps firmware, wp 6101-wxps firmware, wp 6121-wxps firmware, wp 6156-whps firmware, wp 6185-whps firmware, wp 6215-whps firmware
Weakness
CWE-311
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.