CVE:CVE-2023-37862
CNNVD:CNNVD-202308-789
PHOENIX CONTACTs WP 6xxx series web panels是德国菲尼克斯电气（PHOENIX CONTACTs）公司的一系列网页面板。
PHOENIX CONTACTs WP 6xxx series web panels 4.0.10 之前版本存在安全漏洞，该漏洞源于在Web 面板中，未经身份验证的远程攻击者可以访问 HTTP API 的上传功能，导致 SSL 连接的证书错误，并可能导致部分拒绝服务。
solution:Upgrade phoenixcontact wp_6070-wvps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6101-wxps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6121-wxps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6156-whps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6185-whps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10); Upgrade phoenixcontact wp_6215-whps_firmware to a higher version than 4.0.10,and avoid the version (,4.0.10)