CVE-2024-47560

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local...

J’s Communication RevoWorks Cloud Client 安全漏洞

J's Communication RevoWorks Cloud Client is a software from J's Communication Japan for building sandboxed environments that are isolated from the customer's local environment. A security vulnerability exists in J's Communication RevoWorks Cloud Client version 3.0.91 and prior versions. An attack...

PT-2024-32660 · Revoworks · Revoworks Cloud Client

Name of the Vulnerable Software and Affected Versions: RevoWorks Cloud Client versions 3.0.91 and earlier Description: The issue is related to an incorrect authorization vulnerability. If exploited, it may allow unintended processes to be executed in the sandbox environment. Although the local...

The vulnerability of the microprogramming software of the PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the microprogrammed software of the PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a...

Phoenix Contact TC ROUTER and TC CLOUD CLIENT

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Phoenix Contact Equipment : TC ROUTER and TC CLOUD CLIENT Vulnerabilities : Cross-site Scripting, XML Entity Expansion 2. RISK EVALUATION Successful exploitation of this...

CVE-2023-3569

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3569

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3526

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

Design/Logic Flaw

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

Design/Logic Flaw

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3569

CVE-2023-3569 affects Phoenix Contact devices: TC ROUTER and TC CLOUD CLIENT prior to 2.07.2, and CLOUD CLIENT 1101T-TX/TX prior to 2.06.10. A crafted XML file could be uploaded by an authenticated remote attacker with admin privileges, triggering a denial-of-service. The vulnerability stems from...

CVE-2023-3569 PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3569 PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service...

CVE-2023-3526 PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

CVE-2023-3526

CVE-2023-3526 affects Phoenix Contact TC ROUTER (multiple variants), TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX with versions prior to 2.07.2 (and 2.06.10 for 1101T-TX/TX). The vulnerability is a reflective XSS in the device license viewer page that could allow an unauthenticated remote attack...

CVE-2023-3526 PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's...

PT-2023-5484 · Phoenix Contact · Tc Cloud Client +2

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT TC ROUTER versions prior to 2.07.2 PHOENIX CONTACT TC CLOUD CLIENT versions prior to 2.07.2 PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX versions prior to 2.06.10 Description: The issue is related to the incorrect restriction of X...

PHOENIX CONTACTs TC ROUTER Security Breach

PHOENIX CONTACTs TC ROUTER is a series of routers from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACTs TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX, which originates from an authenticated, remote attacker with administrator privileges who can upload a...

PHOENIX CONTACTs TC ROUTER Cross-Site Scripting Vulnerability

PHOENIX CONTACTs TC ROUTER is a series of routers from PHOENIX CONTACTs, Germany. A cross-site scripting vulnerability exists in PHOENIX CONTACTs TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX, which originates from an unauthenticated, remote attacker who can use Reflective XSS to execu...

PT-2023-5483 · Phoenix Contact · Phoenix Contact Tc Router +2

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT TC ROUTER versions prior to 2.07.2 PHOENIX CONTACT TC CLOUD CLIENT versions prior to 2.07.2 PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX versions prior to 2.06.10 Description: The issue allows an unauthenticated remote attacker to...