CVE Catalog
CVE-2023-37855
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.43%
34th percentile - higher than 34% of all known CVEs
Summary
In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with low privileges can gain limited read-access to the device-filesystem within the embedded Qt browser.
Risk Assessment
An attacker may gain access to sensitive data in the filesystem, potentially leading to further attacks or information leakage.
Recommendation
It is recommended to update the panels to version 4.0.10 or later to mitigate this vulnerability.
Original NVD description (English source)
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser.