Phoenix Contact TC Cloud Client 1002 4G ATT vulnerabilities

3 vulnerabilities

Known vulnerabilities in Phoenix Contact TC Cloud Client 1002 4G ATT, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-41717phoenix contactcloud client 1101t-tx/tx+10
EPSS score
0.55%
An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).9.6CVE-2023-3526phoenix contactcloud client 1101t-tx/tx+13
EPSS score
1.79%
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.4.9CVE-2023-3569phoenix contactcloud client 1101t-tx/tx+13
EPSS score
1.41%
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.