CVE-2023-1109

🗓️ 17 Apr 2023 07:32:24Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 36 Views

Vulnerability in Phoenix Contacts ENERGY AXC PU Web service allows authenticated user to access, read, write, and create files, leading to potential full control.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-1109	17 Apr 202312:28	–	circl
CNNVD	PHOENIX CONTACT ENERGY AXC PU 路径遍历漏洞	17 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-1109 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service	17 Apr 202307:32	–	cvelist
EUVD	EUVD-2023-23395	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1109	17 Apr 202308:15	–	nvd
OSV	CVE-2023-1109	17 Apr 202308:15	–	osv
Prion	Design/Logic Flaw	17 Apr 202308:15	–	prion
Positive Technologies	PT-2023-7105 · Phoenix Contact · Phoenix Contacts Energy Axc Pu	17 Apr 202300:00	–	ptsecurity
Tenable Nessus	Phoenix Contact ENERGY AXC PU Path Traversal (CVE-2023-1109)	26 Apr 202300:00	–	nessus
Vulnrichment	CVE-2023-1109 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service	17 Apr 202307:32	–	vulnrichment

NVD

Vulners

Node

phoenixcontact energy_axc_puRange01.00.00.00–04.15.00.00

Node

phoenixcontact infobox_firmwareRange01.00.00.00–02.02.00.00

AND

phoenixcontact infoboxMatch-

Node

phoenixcontact smartrtu_axc_sg_firmwareRange01.00.00.00–01.08.00.02

AND

phoenixcontact smartrtu_axc_sgMatch-

Node

phoenixcontact smartrtu_axc_ig_firmwareRange01.00.00.00–01.02.00.01

AND

phoenixcontact smartrtu_axc_igMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ENERGY AXC PU (1264327)",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V04.15.00.00",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SMARTRTU AXC SG (1110435)",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V01.08.00.02",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SMARTRTU AXC IG (1264328)",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V01.02.00.01",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "Infobox (1169323 )",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V02.02.00.00",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2023-003/
github	www.github.com/advisories/GHSA-w923-8w64-f5gh

21 Nov 2024 07:38Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.00644

SSVC

CWE-22