Phoenix Contact TC Router 3002T 4G vulnerabilities
3 vulnerabilities
Known vulnerabilities in Phoenix Contact TC Router 3002T 4G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-41717phoenix contactcloud client 1101t-tx/tx+10
EPSS score0.55%
An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).CVE-2023-3526phoenix contactcloud client 1101t-tx/tx+13EPSS score1.79%
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.CVE-2023-3569phoenix contactcloud client 1101t-tx/tx+13EPSS score1.41%
In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.