Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2023-3569

PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

Description

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX

Default version status: unaffected

  • 0 to < 2.06.10affected

PHOENIX CONTACT TC CLOUD CLIENT 1002-4G

Default version status: unaffected

  • 0 to < 2.07.2affected

PHOENIX CONTACT TC CLOUD CLIENT 1002-4G ATT

Default version status: unaffected

  • 0 to < 2.07.2affected

PHOENIX CONTACT TC CLOUD CLIENT 1002-4G VZW

Default version status: unaffected

  • 0 to < 2.07.2affected

PHOENIX CONTACT TC ROUTER 3002T-4G

Default version status: unaffected

  • 0 to < 2.07.2affected

PHOENIX CONTACT TC ROUTER 3002T-4G ATT

Default version status: unaffected

  • 0 to < 2.07.2affected

PHOENIX CONTACT TC ROUTER 3002T-4G VZW

Default version status: unaffected

  • 0 to < 2.07.2affected

References