CVE-2023-3569mediumCWE-776

CVE-2023-3569: medium-severity vulnerability in PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX

PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

Published · Updated

Follow this CVE+ Monitor CLOUD CLIENT 1101T-TX/TX+ Monitor TC CLOUD CLIENT 1002-4G ATT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 1.4%
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
PHOENIX CONTACT · CLOUD CLIENT 1101T-TX/TXPHOENIX CONTACT · TC CLOUD CLIENT 1002-4GPHOENIX CONTACT · TC CLOUD CLIENT 1002-4G ATTPHOENIX CONTACT · TC CLOUD CLIENT 1002-4G VZWPHOENIX CONTACT · TC ROUTER 3002T-4GPHOENIX CONTACT · TC ROUTER 3002T-4G ATTPHOENIX CONTACT · TC ROUTER 3002T-4G VZW
Related CVEs — PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX

In the same product, most dangerous first.

CVE-2023-3526CRITICALPHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devicesEPSS 1.8%