CVE-2023-3572
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request related to date/time operations to gain full access to the device.
Risk Assessment
An attacker could gain full control over the device, potentially leading to serious security implications for the organization's systems and data.
Recommendation
It is recommended to update the panels to version 4.0.10 or later to mitigate this vulnerability.
Original NVD description (English source)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.