Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 191

Export CSV
CVE-2023-3571

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-3570

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37864

PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37863

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37862

PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37861

PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37859

PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37858

PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing to decrypt an encrypted web application login password.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37857

PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing the attacker to create valid session cookies. These session-cookies created by the attacker are not sufficient to obtain a valid session on the device.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37856

PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-37855

PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Wp 6070-wvps Wp 6070-wvps Firmware Wp 6101-wxps and 9 more
CVE-2023-0757

Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Multiprog Proconos Eclr
CVE-2022-29898

Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of the firmware.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Rad-ism-900-en-bd Rad-ism-900-en-bd-bus Rad-ism-900-en-bd-bus Firmware and 3 more
CVE-2022-29897

Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.

CVSS 3.1 · 9.1 Critical EPSS 1.4% KEV · Not listed
Vendors
Phoenixcontact
Products
Rad-ism-900-en-bd Rad-ism-900-en-bd-bus Rad-ism-900-en-bd-bus Firmware and 3 more
CVE-2021-34598

Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Fl Mguard 1102 Fl Mguard 1102 Firmware Fl Mguard 1105 and 1 more
CVE-2021-34597

Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Pc Worx Pc Worx Express
CVE-2021-34582

Phoenix Contact: FL MGUARD XSS through web-based management and REST API

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Fl Mguard 1102 Fl Mguard 1102 Firmware Fl Mguard 1105 and 1 more
CVE-2021-34570

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Axc F 1152 Axc F 1152 Firmware Axc F 2152 and 9 more