Lucene search

CERTVDECVE-2023-1109

HistoryApr 17, 2023 - 8:15 a.m.

CVE-2023-1109

2023-04-1708:15:07

CWE-22

CERTVDE

web.nvd.nist.gov

cve-2023-1109

phoenix contacts

energy axc pu

web service

file system

security vulnerability

authentication

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

27.1%

JSON

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service.

Affected configurations

Nvd

Node

phoenixcontactenergy_axc_puRange01.00.00.00–04.15.00.00

Node

phoenixcontactinfoboxMatch-

AND

phoenixcontactinfobox_firmwareRange01.00.00.00–02.02.00.00

Node

phoenixcontactsmartrtu_axc_sgMatch-

AND

phoenixcontactsmartrtu_axc_sg_firmwareRange01.00.00.00–01.08.00.02

Node

phoenixcontactsmartrtu_axc_igMatch-

AND

phoenixcontactsmartrtu_axc_ig_firmwareRange01.00.00.00–01.02.00.01

VendorProductVersionCPE
phoenixcontactenergy_axc_pu*cpe:2.3:a:phoenixcontact:energy_axc_pu:*:*:*:*:*:*:*:*
phoenixcontactinfobox-cpe:2.3:h:phoenixcontact:infobox:-:*:*:*:*:*:*:*
phoenixcontactinfobox_firmware*cpe:2.3:o:phoenixcontact:infobox_firmware:*:*:*:*:*:*:*:*
phoenixcontactsmartrtu_axc_sg-cpe:2.3:h:phoenixcontact:smartrtu_axc_sg:-:*:*:*:*:*:*:*
phoenixcontactsmartrtu_axc_sg_firmware*cpe:2.3:o:phoenixcontact:smartrtu_axc_sg_firmware:*:*:*:*:*:*:*:*
phoenixcontactsmartrtu_axc_ig-cpe:2.3:h:phoenixcontact:smartrtu_axc_ig:-:*:*:*:*:*:*:*
phoenixcontactsmartrtu_axc_ig_firmware*cpe:2.3:o:phoenixcontact:smartrtu_axc_ig_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phoenixcontact	energy_axc_pu	*	cpe:2.3:a:phoenixcontact:energy_axc_pu::::::::
phoenixcontact	infobox	-	cpe:2.3:h:phoenixcontact:infobox:-:::::::*
phoenixcontact	infobox_firmware	*	cpe:2.3:o:phoenixcontact:infobox_firmware::::::::
phoenixcontact	smartrtu_axc_sg	-	cpe:2.3:h:phoenixcontact:smartrtu_axc_sg:-:::::::*
phoenixcontact	smartrtu_axc_sg_firmware	*	cpe:2.3:o:phoenixcontact:smartrtu_axc_sg_firmware::::::::
phoenixcontact	smartrtu_axc_ig	-	cpe:2.3:h:phoenixcontact:smartrtu_axc_ig:-:::::::*
phoenixcontact	smartrtu_axc_ig_firmware	*	cpe:2.3:o:phoenixcontact:smartrtu_axc_ig_firmware::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ENERGY AXC PU (1264327)",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V04.15.00.00",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SMARTRTU AXC SG (1110435)",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V01.08.00.02",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SMARTRTU AXC IG (1264328)",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V01.02.00.01",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "Infobox (1169323 )",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "V02.02.00.00",
        "status": "affected",
        "version": "V01.00.00.00",
        "versionType": "custom"
      }
    ]
  }
]

References

cert.vde.com/en/advisories/VDE-2023-003/

github.com/advisories/GHSA-w923-8w64-f5gh

Social References

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

27.1%

JSON

Related for CVE-2023-1109