The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems from PHOENIX CONTACTs WP 6xxx exists due to the lack of measures taken to neutralize special elements used in the operating system command. This vulnerability allows a intruder to gain unauthorized access to the device.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow a malicious actor,...

PHOENIX CONTACTs TC ROUTER Security Breach

PHOENIX CONTACTs TC ROUTER is a series of routers from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACTs TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX, which originates from an authenticated, remote attacker with administrator privileges who can upload a...

PT-2023-4652 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute...

PT-2023-4529 · Phoenix Contact · Phoenix Contact Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT WP 6xxx series web panels versions prior to 4.0.10 Description: The issue is related to the use of hardcoded credentials in the web panels for managing and monitoring processes in industrial systems. An authenticated, remote...

PHOENIX CONTACTs TC ROUTER Cross-Site Scripting Vulnerability

PHOENIX CONTACTs TC ROUTER is a series of routers from PHOENIX CONTACTs, Germany. A cross-site scripting vulnerability exists in PHOENIX CONTACTs TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX, which originates from an unauthenticated, remote attacker who can use Reflective XSS to execu...

PT-2023-4519 · Phoenix Contact · Phoenix Contact Wp 6Xxx

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT WP 6xxx versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements in the software of PHOENIX CONTACT WP 6xxx web panels, which are used for management and monitoring in...

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems from PHOENIX CONTACTs WP 6xxx exists due to the lack of measures taken to neutralize special elements used in the operating system command. This vulnerability allows a intruder to gain unauthorized access to the device.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow a malicious actor,...

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems from PHOENIX CONTACTs WP 6xxx exists due to the lack of measures taken to neutralize special elements used in the operating system command. This vulnerability allows a intruder to gain unauthorized access to the device.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow a malicious actor,...

PT-2023-5483 · Phoenix Contact · Phoenix Contact Tc Router +2

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT TC ROUTER versions prior to 2.07.2 PHOENIX CONTACT TC CLOUD CLIENT versions prior to 2.07.2 PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX versions prior to 2.06.10 Description: The issue allows an unauthenticated remote attacker to...

PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels is a series of web panels from PHOENIX CONTACTs, Germany. An operating system command injection vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10, which originates from a low-privileged remote attacker who could...

PT-2023-4197 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. A remote attacker with low privileges may use a...

PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. An operating system command injection vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10, which originates from a low-privileged remote attacker who may b...

Siemens PLC Cycle Time Influences Uncontrolled Resource Consumption (CVE-2019-10953)

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets. This plugin only works with Tenable.ot. Please visit...

The vulnerability of the microprogramming software of the PHOENIX CONTACT FL/TC MGUARD family allows a attacker to cause a service failure.

The vulnerability of the microprogrammed software of the PHOENIX CONTACT FL/TC MGUARD family is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

phoenix-auction.com Cross Site Scripting vulnerability OBB-3488198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

phoenixartdeco.it Cross Site Scripting vulnerability OBB-3455355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2673

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

CVE-2023-2673

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

Input validation

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

CVE-2023-2673 PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...