Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AXC F 1152 (1151412)
Vendor
Phoenix Contact
Product
AXC F 1152 (1151412)
Platforms
Unknown
Default status
Unknown
AXC F 1152 (1151412) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
2021.0 LTS
Unavailable
None listed
AXC F 2152 (2404267)
Vendor
Phoenix Contact
Product
AXC F 2152 (2404267)
Platforms
Unknown
Default status
Unknown
AXC F 2152 (2404267) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
2021.0 LTS
Unavailable
None listed
AXC F 3152 (1069208)
Vendor
Phoenix Contact
Product
AXC F 3152 (1069208)
Platforms
Unknown
Default status
Unknown
AXC F 3152 (1069208) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
2021.0 LTS
Unavailable
None listed
RFC 4072S (1051328
Vendor
Phoenix Contact
Product
RFC 4072S (1051328
Platforms
Unknown
Default status
Unknown
RFC 4072S (1051328 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
2021.0 LTS
Unavailable
None listed
AXC F 2152 Starterkit (1046568)
Vendor
Phoenix Contact
Product
AXC F 2152 Starterkit (1046568)
Platforms
Unknown
Default status
Unknown
AXC F 2152 Starterkit (1046568) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
2021.0 LTS
Unavailable
None listed
PLCnext Technology Starterkit (1188165)
Vendor
Phoenix Contact
Product
PLCnext Technology Starterkit (1188165)
Platforms
Unknown
Default status
Unknown
PLCnext Technology Starterkit (1188165) · Scoped product and version facts