CVE:CVE-2023-37857
CNNVD:CNNVD-202308-863
PHOENIX CONTACTs WP 6xxx series web panels是德国菲尼克斯电气（PHOENIX CONTACTs）公司的一系列网页面板。
PHOENIX CONTACT WP 6xxx 系列 4.0.10 之前版本存在信任管理问题漏洞，该漏洞源于在Web 面板中，具有管理员权限的远程攻击者能够读取硬编码的加密密钥，从而允许攻击者创建有效的会话 cookie。
solution:Upgrade phoenixcontact wp_6070-wvps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6101-wxps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6121-wxps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6156-whps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6185-whps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6215-whps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10)