CVE-2023-3569

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

Design/Logic Flaw

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

Design/Logic Flaw

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3569

CVE-2023-3569 affects Phoenix Contact devices: TC ROUTER and TC CLOUD CLIENT prior to 2.07.2, and CLOUD CLIENT 1101T-TX/TX prior to 2.06.10. A crafted XML file could be uploaded by an authenticated remote attacker with admin privileges, triggering a denial-of-service. The vulnerability stems from...

CVE-2023-3569 PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3569 PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3526 PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

CVE-2023-3526 PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

CVE-2023-3526

CVE-2023-3526 affects Phoenix Contact TC ROUTER (multiple variants), TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX with versions prior to 2.07.2 (and 2.06.10 for 1101T-TX/TX). The vulnerability is a reflective XSS in the device license viewer page that could allow an unauthenticated remote attack...

PT-2023-5484 · Phoenix Contact · Tc Cloud Client +2

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT TC ROUTER versions prior to 2.07.2 PHOENIX CONTACT TC CLOUD CLIENT versions prior to 2.07.2 PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX versions prior to 2.06.10 Description: The issue is related to the incorrect restriction of X...

CVE-2023-3569: Improper Restriction of Recursive Entity References in DTDs

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3526: Improper Neutralization of Input During Web Page Generation

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

PHOENIX CONTACTs TC ROUTER Cross-Site Scripting Vulnerability

PHOENIX CONTACTs TC ROUTER is a series of routers from PHOENIX CONTACTs, Germany. A cross-site scripting vulnerability exists in PHOENIX CONTACTs TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX, which originates from an unauthenticated, remote attacker who can use Reflective XSS to execu...

PHOENIX CONTACTs TC ROUTER Security Breach

PHOENIX CONTACTs TC ROUTER is a series of routers from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACTs TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX, which originates from an authenticated, remote attacker with administrator privileges who can upload a...

PT-2023-5483 · Phoenix Contact · Phoenix Contact Tc Router +2

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT TC ROUTER versions prior to 2.07.2 PHOENIX CONTACT TC CLOUD CLIENT versions prior to 2.07.2 PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX versions prior to 2.06.10 Description: The issue allows an unauthenticated remote attacker to...

PT-2025-11271

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.133-1 Debian bookworm and versions prior to 6.1.137-1deb11u1 Debian 11 bullseye. Description The Linux kernel contains a vulnerability in the netfilter module where the exp expectation object may not be remov...

CVE-2023-35788

A flaw was found in the TC flower classifier clsflower in the Networking subsystem of the Linux kernel. This issue occurs when sending two TCAFLOWERKEYENCOPTSGENEVE packets with a total size of 252 bytes, which results in an out-of-bounds write when the third packet enters flsetgeneveopt,...

Ubuntu: Security Advisory (USN-6171-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6171-1: Linux kernel vulnerabilities

William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the TUN/TAP driver in t...

CVE-2023-2673

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...