2 lines
6.7 KiB
JSON
2 lines
6.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CLOUD CLIENT 1101T-TX/TX","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.06.10","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TC CLOUD CLIENT 1002-4G","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.07.2","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TC CLOUD CLIENT 1002-4G ATT","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.07.2","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TC CLOUD CLIENT 1002-4G VZW","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.07.2","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TC ROUTER 3002T-4G","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.07.2","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TC ROUTER 3002T-4G ATT","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.07.2","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TC ROUTER 3002T-4G VZW","vendor":"PHOENIX CONTACT","versions":[{"lessThan":"2.07.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:cloud_client_1101t-tx_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F27D7C23-5F63-42C6-AEC8-B3033693B91E","versionEndExcluding":"2.06.10","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:cloud_client_1101t-tx:-:*:*:*:*:*:*:*","matchCriteriaId":"1B6CD87A-C42B-4452-BCE8-87AAC75A07A0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:tc_cloud_client_1002-4g_att_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B4EC6E85-D2D8-4D8B-86E5-FF50BAD5584F","versionEndExcluding":"2.07.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:tc_cloud_client_1002-4g_att:-:*:*:*:*:*:*:*","matchCriteriaId":"98C24755-6451-49AD-8DD6-2A4A20E42E06","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:tc_cloud_client_1002-4g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8294FF44-17CF-45B3-BCAD-D334AF4001FA","versionEndExcluding":"2.07.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:tc_cloud_client_1002-4g:-:*:*:*:*:*:*:*","matchCriteriaId":"C42AB40F-8156-4C5C-86DC-8F10E6C70F4D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:tc_cloud_client_1002-4g_vzw_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C3133D1F-7110-411B-B242-A5F58F2CBB47","versionEndExcluding":"2.07.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:tc_cloud_client_1002-4g_vzw:-:*:*:*:*:*:*:*","matchCriteriaId":"F6480AF5-913F-4D2E-879F-149B25513093","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:tc_router_3002t-4g_att_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"18E45B91-E395-4F80-AD9E-6993C881BDEE","versionEndExcluding":"2.07.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:tc_router_3002t-4g_att:-:*:*:*:*:*:*:*","matchCriteriaId":"9C2CB341-1DD5-4A74-A6D4-5AA7F01E50BD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:tc_router_3002t-4g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E4FD4A8A-5B20-4467-A8C5-DB8CAE10B78D","versionEndExcluding":"2.07.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:tc_router_3002t-4g:-:*:*:*:*:*:*:*","matchCriteriaId":"34273B74-2964-4DDF-B464-6D312528366B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:phoenixcontact:tc_router_3002t-4g_vzw_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"88EA471C-672E-4DD0-B0C9-2E5E7C695774","versionEndExcluding":"2.07.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:phoenixcontact:tc_router_3002t-4g_vzw:-:*:*:*:*:*:*:*","matchCriteriaId":"CA9B96D9-DBCD-4858-94B1-CFE5AF2DD35E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser."}],"id":"CVE-2023-3526","lastModified":"2026-06-17T06:14:16.777","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":6.0,"source":"info@cert.vde.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3526","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-26T21:54:22.893389Z","version":"2.0.3"}}]},"published":"2023-08-08T07:15:10.150","references":[{"source":"info@cert.vde.com","url":"http://packetstormsecurity.com/files/174152/Phoenix-Contact-TC-Cloud-TC-Router-2.x-XSS-Memory-Consumption.html"},{"source":"info@cert.vde.com","url":"http://seclists.org/fulldisclosure/2023/Aug/12"},{"source":"info@cert.vde.com","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2023-017"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://packetstormsecurity.com/files/174152/Phoenix-Contact-TC-Cloud-TC-Router-2.x-XSS-Memory-Consumption.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://seclists.org/fulldisclosure/2023/Aug/12"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2023-017"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"info@cert.vde.com","type":"Secondary"}]}
|