PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 1.4%
exploitation probability
1.4%top 30% of all CVEs
observed exploitation
nono source reports it
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
PHOENIX CONTACT · CLOUD CLIENT 1101T-TX/TXPHOENIX CONTACT · TC CLOUD CLIENT 1002-4GPHOENIX CONTACT · TC CLOUD CLIENT 1002-4G ATTPHOENIX CONTACT · TC CLOUD CLIENT 1002-4G VZWPHOENIX CONTACT · TC ROUTER 3002T-4GPHOENIX CONTACT · TC ROUTER 3002T-4G ATTPHOENIX CONTACT · TC ROUTER 3002T-4G VZW