Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX, TC CLOUD CLIENT 1002-4G and 5 more products 2.06.10, 2.07.2 Clear all filters
TI-2023-03331 CVE-2023-3569 · GHSA-4322-9574-7cv6

PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

Priority LOW 25

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file wh…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01408 Published 2023-08-08 Fixed in 2.06.10, 2.07.2 CWE-776
TI-2023-03291 CVE-2023-3526 · GHSA-v33q-q39m-425m

PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

Priority MEDIUM 46

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer p…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01794 Published 2023-08-08 Fixed in 2.06.10, 2.07.2 CWE-79