PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CLOUD CLIENT 1101T-TX/TX
Vendor
PHOENIX CONTACT
Product
CLOUD CLIENT 1101T-TX/TX
Platforms
Unknown
Default status
unaffected
CLOUD CLIENT 1101T-TX/TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.06.10
Unavailable
None listed
TC CLOUD CLIENT 1002-4G
Vendor
PHOENIX CONTACT
Product
TC CLOUD CLIENT 1002-4G
Platforms
Unknown
Default status
unaffected
TC CLOUD CLIENT 1002-4G · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC CLOUD CLIENT 1002-4G ATT
Vendor
PHOENIX CONTACT
Product
TC CLOUD CLIENT 1002-4G ATT
Platforms
Unknown
Default status
unaffected
TC CLOUD CLIENT 1002-4G ATT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC CLOUD CLIENT 1002-4G VZW
Vendor
PHOENIX CONTACT
Product
TC CLOUD CLIENT 1002-4G VZW
Platforms
Unknown
Default status
unaffected
TC CLOUD CLIENT 1002-4G VZW · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC ROUTER 3002T-4G
Vendor
PHOENIX CONTACT
Product
TC ROUTER 3002T-4G
Platforms
Unknown
Default status
unaffected
TC ROUTER 3002T-4G · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC ROUTER 3002T-4G ATT
Vendor
PHOENIX CONTACT
Product
TC ROUTER 3002T-4G ATT
Platforms
Unknown
Default status
unaffected
TC ROUTER 3002T-4G ATT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC ROUTER 3002T-4G VZW
Vendor
PHOENIX CONTACT
Product
TC ROUTER 3002T-4G VZW
Platforms
Unknown
Default status
unaffected
TC ROUTER 3002T-4G VZW · Scoped product and version facts