CVE-2023-3573: Phoenixcontact Wp 6070-Wvps Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device.

Affected products

• Phoenixcontact Wp 6070-Wvps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6101-Wxps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6121-Wxps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6156-Whps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6185-Whps Firmware: before 4.0.10 (fixed in 4.0.10)
• Phoenixcontact Wp 6215-Whps Firmware: before 4.0.10 (fixed in 4.0.10)

Published 2023-08-08. Last modified 2026-06-17.