CVE-2023-37859CWE-269

PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels

High · published August 9, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00863 · 58.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-08-09T06:36Z
EPSS history
Timeline
  • 09 AUG 06:36Z
    PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels
    cvelistv5