CVE-2023-3569: PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-08 · updated 2026-06-17
Weakness: CWE-776

Description

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.

Affected products

Phoenixcontact Cloud Client 1101T-Tx Firmware: before 2.06.10 — fixed in 2.06.10
Phoenixcontact Tc Cloud Client 1002-4G Att Firmware: before 2.07.2 — fixed in 2.07.2
Phoenixcontact Tc Cloud Client 1002-4G Firmware: before 2.07.2 — fixed in 2.07.2
Phoenixcontact Tc Cloud Client 1002-4G Vzw Firmware: before 2.07.2 — fixed in 2.07.2
Phoenixcontact Tc Router 3002T-4G Att Firmware: before 2.07.2 — fixed in 2.07.2
Phoenixcontact Tc Router 3002T-4G Firmware: before 2.07.2 — fixed in 2.07.2
Phoenixcontact Tc Router 3002T-4G Vzw Firmware: before 2.07.2 — fixed in 2.07.2

How to fix

Upgrade to a fixed version: Phoenixcontact Cloud Client 1101T-Tx Firmware 2.06.10; Phoenixcontact Tc Cloud Client 1002-4G Att Firmware 2.07.2; Phoenixcontact Tc Cloud Client 1002-4G Firmware 2.07.2; Phoenixcontact Tc Cloud Client 1002-4G Vzw Firmware 2.07.2; Phoenixcontact Tc Router 3002T-4G Att Firmware 2.07.2; Phoenixcontact Tc Router 3002T-4G Firmware 2.07.2; Phoenixcontact Tc Router 3002T-4G Vzw Firmware 2.07.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-3569 or the next vulnerability affects your stack