CVE-2023-3570

Summary

CVE-2023-3570 is a vulnerability affecting PHOENIX CONTACT's WP 6xxx series web panels in versions below 4.0.10. An unauthenticated, low-privileged attacker can exploit this issue by sending a crafted HTTP DELETE request. Successful exploitation grants the attacker full access to the device, posing a significant risk to industrial control systems and other critical infrastructure. It is essential that affected organizations update their web panel software to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.