CVE-2023-37855

Summary

CVE-2023-37855 is a vulnerability affecting PHOENIX CONTACT's WP 6xxx series web panels before version 4.0.10. This issue allows a remote attacker with minimal privileges to access limited read-only permissions on the device's filesystem, which can be exploited through the embedded Qt browser. The impact of this vulnerability is relatively low as read-only access does not grant significant control over the system, but it may still pose a risk if sensitive data is present on the affected device. Users are advised to update to the latest version of the software to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.