https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:14:55.016170+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06129 bdu:2023-06129 2026-10-04T22:14:55.103875+00:00 bdu:2023-06129 https://cve.radiocsirt.org/vuln/euvd-2026-219795 EUVD-2026-219795 2026-10-04T22:14:55.103914+00:00 EUVD-2026-219795 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3526 fkie_cve-2023-3526 2026-10-04T22:14:55.103928+00:00

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.

 https://cve.radiocsirt.org/vuln/ghsa-v33q-q39m-425m GHSA-v33q-q39m-425m 2026-10-04T22:14:55.103960+00:00

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.

 https://cve.radiocsirt.org/vuln/gsd-2023-3526 gsd-2023-3526 2026-10-04T22:14:55.103978+00:00 gsd-2023-3526 https://cve.radiocsirt.org/vuln/icsa-23-250-02 ICSA-23-250-02 — Phoenix Contact TC ROUTER and TC CLOUD CLIENT 2026-10-04T22:14:55.103989+00:00

In PHOENIX CONTACT TC ROUTER and TC CLOUD CLIENT prior to version 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to version 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser. In PHOENIX CONTACT TC ROUTER and TC CLOUD CLIENT prior to version 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to version 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial of service.

 https://cve.radiocsirt.org/vuln/vde-2023-017 VDE-2023-017 — Phoenix Contact: Multiple vulnerabilities in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices 2026-10-04T22:14:55.104011+00:00

Two vulnerabilities have been discovered in the firmware of TC ROUTER and TC CLOUD CLIENT devices.

Update A, 2024-08-12

Added a summary text Added details to impact

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1975 WID-SEC-W-2023-1975 — Phoenix Contact TC ROUTER und TC CLOUD CLIENT: Mehrere Schwachstellen 2026-10-04T22:14:55.104029+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Phoenix Contact TC ROUTER und TC CLOUD CLIENT Geräten ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial of Service Zustad herbeizuführen.