CVE-2023-3572: Phoenixcontact Wp 6070-Wvps Firmware

Critical severity, CVSS 10.0. EPSS: 1% chance of exploitation in the next 30 days.

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.

Affected products

• Phoenixcontact Wp 6070-Wvps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6101-Wxps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6121-Wxps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6156-Whps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6185-Whps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6215-Whps Firmware: before 4.0.10 (fixed in 4.0.10)

Published 2023-08-08. Last modified 2026-06-17.