1. Home
  2. CVE Database
  3. CVE-2023-3526
CRITICAL · 9.6

CVE-2023-3526

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within ...

Vulnerability Description

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
PhoenixcontactCloud Client 1101T-Tx Firmware< 2.06.10
PhoenixcontactCloud Client 1101T-Tx-
PhoenixcontactTc Cloud Client 1002-4G Att Firmware< 2.07.2
PhoenixcontactTc Cloud Client 1002-4G Att-
PhoenixcontactTc Cloud Client 1002-4G Firmware< 2.07.2
PhoenixcontactTc Cloud Client 1002-4G-
PhoenixcontactTc Cloud Client 1002-4G Vzw Firmware< 2.07.2
PhoenixcontactTc Cloud Client 1002-4G Vzw-
PhoenixcontactTc Router 3002T-4G Att Firmware< 2.07.2
PhoenixcontactTc Router 3002T-4G Att-
PhoenixcontactTc Router 3002T-4G Firmware< 2.07.2
PhoenixcontactTc Router 3002T-4G-
PhoenixcontactTc Router 3002T-4G Vzw Firmware< 2.07.2
PhoenixcontactTc Router 3002T-4G Vzw-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2023-3526?

CVE-2023-3526 is a vulnerability with a CVSS score of 9.6 (CRITICAL). In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within ...

How severe is CVE-2023-3526?

CVE-2023-3526 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-3526?

Check the references section above for vendor advisories and patch information. Affected products include: Phoenixcontact Cloud Client 1101T-Tx Firmware, Phoenixcontact Cloud Client 1101T-Tx, Phoenixcontact Tc Cloud Client 1002-4G Att Firmware, Phoenixcontact Tc Cloud Client 1002-4G Att, Phoenixcontact Tc Cloud Client 1002-4G Firmware.