Description
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | CLOUD CLIENT 1101T-TX/TX | < 2.06.10 | 2.06.10 |
| PHOENIX CONTACT | TC CLOUD CLIENT 1002-4G | < 2.07.2 | 2.07.2 |
| PHOENIX CONTACT | TC CLOUD CLIENT 1002-4G ATT | < 2.07.2 | 2.07.2 |
| PHOENIX CONTACT | TC CLOUD CLIENT 1002-4G VZW | < 2.07.2 | 2.07.2 |
| PHOENIX CONTACT | TC ROUTER 3002T-4G | < 2.07.2 | 2.07.2 |
| PHOENIX CONTACT | TC ROUTER 3002T-4G ATT | < 2.07.2 | 2.07.2 |
| PHOENIX CONTACT | TC ROUTER 3002T-4G VZW | < 2.07.2 | 2.07.2 |
Advisories 3
- VDE-2023-017 Phoenix Contact: Multiple vulnerabilities in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices CERT@VDE · May 22, 2025
- ICSA-23-250-02 Phoenix Contact TC ROUTER and TC CLOUD CLIENT CISA ICS & IT advisories · Sep 7, 2023
- WID-SEC-2023-1975 Phoenix Contact TC ROUTER und TC CLOUD CLIENT: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 7, 2023