WID-SEC-W-2023-1975

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Phoenix Contact TC ROUTER und TC CLOUD CLIENT: Mehrere Schwachstellen

view advisory published 2023-08-07

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Phoenix Contact TC ROUTER und TC CLOUD CLIENT Geräten ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial of Service Zustad herbeizuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-3569US——
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin priv…
CVE-2023-3526US——
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a re…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan