CVE-2023-3569: Phoenixcontact Cloud Client 1101t-Tx Firmware

Medium severity, CVSS 4.9. EPSS: 1.4% chance of exploitation in the next 30 days.

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.

Affected products

• Phoenixcontact Cloud Client 1101t-Tx Firmware: before 2.06.10 (fixed in 2.06.10)
• Phoenixcontact Tc Cloud Client 1002-4g Att Firmware: before 2.07.2 (fixed in 2.07.2)
• Phoenixcontact Tc Cloud Client 1002-4g Firmware: before 2.07.2 (fixed in 2.07.2)
• Phoenixcontact Tc Cloud Client 1002-4g Vzw Firmware: before 2.07.2 (fixed in 2.07.2)
• Phoenixcontact Tc Router 3002t-4g Att Firmware: before 2.07.2 (fixed in 2.07.2)
• Phoenixcontact Tc Router 3002t-4g Firmware: before 2.07.2 (fixed in 2.07.2)
• Phoenixcontact Tc Router 3002t-4g Vzw Firmware: before 2.07.2 (fixed in 2.07.2)

Published 2023-08-08. Last modified 2026-06-17.