Phoenixcontact Tc Cloud Client 1002-4g Vzw Firmware vulnerabilities

2 CVEs affecting Phoenixcontact Tc Cloud Client 1002-4g Vzw Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-3569, published 2023-08-08.

More from Phoenixcontact.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-3526, published 2023-08-08. Critical severity, CVSS 9.6. EPSS: 1.8% chance of exploitation in the next 30 days. In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within…
• CVE-2023-3569, published 2023-08-08. Medium severity, CVSS 4.9. EPSS: 1.4% chance of exploitation in the next 30 days. In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload…