Podatność CVE-2023-37856
Publikacja: 2023-08-09

Opis:
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .

Typ:

CWE-610

 (Externally Controlled Reference to a Resource in Another Sphere)

 Referencje:
https://cert.vde.com/en/advisories/VDE-2023-018/
Copyright 2024, cxsecurity.com

 

Back to Top