CVE-2023-3569
MediumCVSS 4.9Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
In PHOENIX CONTACT's TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 and CLOUD CLIENT 1101T-TX/TX prior to 2.06.10, an authenticated remote attacker with admin privileges could upload a crafted XML file, leading to a denial-of-service.
Risk Assessment
An attacker with admin privileges could exploit this vulnerability to disrupt system operations, potentially causing service outages.
Recommendation
It is recommended to update to the latest software versions to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.