VULNERABILITY INTELLIGENCE

CVE-2023-37858

CVSS score4.9 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2023-08-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing to decrypt an encrypted web application login password.

Weakness classification

  • info@cert.vde.com: CWE-311
  • nvd@nist.gov: CWE-311

Primary references