PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CLOUD CLIENT 1101T-TX/TX
Vendor
PHOENIX CONTACT
Product
CLOUD CLIENT 1101T-TX/TX
Platforms
Unknown
Default status
unaffected
CLOUD CLIENT 1101T-TX/TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.06.10
Unavailable
None listed
TC CLOUD CLIENT 1002-4G
Vendor
PHOENIX CONTACT
Product
TC CLOUD CLIENT 1002-4G
Platforms
Unknown
Default status
unaffected
TC CLOUD CLIENT 1002-4G · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC CLOUD CLIENT 1002-4G ATT
Vendor
PHOENIX CONTACT
Product
TC CLOUD CLIENT 1002-4G ATT
Platforms
Unknown
Default status
unaffected
TC CLOUD CLIENT 1002-4G ATT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC CLOUD CLIENT 1002-4G VZW
Vendor
PHOENIX CONTACT
Product
TC CLOUD CLIENT 1002-4G VZW
Platforms
Unknown
Default status
unaffected
TC CLOUD CLIENT 1002-4G VZW · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC ROUTER 3002T-4G
Vendor
PHOENIX CONTACT
Product
TC ROUTER 3002T-4G
Platforms
Unknown
Default status
unaffected
TC ROUTER 3002T-4G · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC ROUTER 3002T-4G ATT
Vendor
PHOENIX CONTACT
Product
TC ROUTER 3002T-4G ATT
Platforms
Unknown
Default status
unaffected
TC ROUTER 3002T-4G ATT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.07.2
Unavailable
None listed
TC ROUTER 3002T-4G VZW
Vendor
PHOENIX CONTACT
Product
TC ROUTER 3002T-4G VZW
Platforms
Unknown
Default status
unaffected
TC ROUTER 3002T-4G VZW · Scoped product and version facts