CVE-2020-9436: phoenixcontact tc_cloud_client_1002-4g_firmware OS Command Injection

Vulnerability summary

CVE-2020-9436 is a high (CVSS 9.0) OS Command Injection vulnerability in phoenixcontact tc_cloud_client_1002-4g_firmware. EPSS estimates a 2.61% chance of exploitation in the next 30 days, higher than 85.1% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 12-03-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated users to inject system commands through a modified POST request to a specific URL.

• CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.