Approved changes feed: RSS · Atom

cpe:2.3:h:phoenixcontact:wp_6185-whps:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductWp 6185 Whps (75f4bade-1619-5c97-b5ca-645ffca70aac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3573 not_vulnerable 2026-06-08 06:09:39.896529 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels
HIGH (8.8)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device.
Published: 2023-08-08T06:51:34.335Z
Updated: 2024-10-15T19:23:30.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3573 vulnerable 2026-06-08 06:09:39.895460 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels
HIGH (8.8)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device.
Published: 2023-08-08T06:51:34.335Z
Updated: 2024-10-15T19:23:30.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3572 not_vulnerable 2026-06-08 06:09:39.894425 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
CRITICAL (10)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.
Published: 2023-08-08T06:52:29.820Z
Updated: 2024-10-15T19:18:16.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3572 vulnerable 2026-06-08 06:09:39.893838 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
CRITICAL (10)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.
Published: 2023-08-08T06:52:29.820Z
Updated: 2024-10-15T19:18:16.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3571 not_vulnerable 2026-06-08 06:09:39.893046 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
HIGH (8.8)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.
Published: 2023-08-08T06:52:05.745Z
Updated: 2024-11-04T17:15:17.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3570 not_vulnerable 2026-06-08 06:09:39.890635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3570 vulnerable 2026-06-08 06:09:39.876043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37864 not_vulnerable 2026-06-08 06:08:16.027792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37864 vulnerable 2026-06-08 06:08:16.027357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37863 not_vulnerable 2026-06-08 06:08:16.026558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37862 not_vulnerable 2026-06-08 06:08:16.025305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37862 vulnerable 2026-06-08 06:08:16.024593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37861 not_vulnerable 2026-06-08 06:08:16.023681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37861 vulnerable 2026-06-08 06:08:16.022775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37860 not_vulnerable 2026-06-08 06:08:16.021763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37860 vulnerable 2026-06-08 06:08:16.021128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37859 not_vulnerable 2026-06-08 06:08:16.020320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37858 not_vulnerable 2026-06-08 06:08:16.019502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37857 not_vulnerable 2026-06-08 06:08:16.018326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37856 not_vulnerable 2026-06-08 06:08:16.017133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37855 not_vulnerable 2026-06-08 06:08:16.014557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.