CVE-2023-37857

Summary

CVE-2023-37857 is a vulnerability affecting the WP 6xxx series web panels from PHOENIX CONTACT in versions prior to 4.0.10. An authenticated attacker with admin privileges can exploit this issue by reading hardcoded cryptographic keys. These keys enable the creation of valid session cookies, which, while not allowing a direct session takeover, may still be exploited for unauthorized access to the device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.