Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:46:35 +0000 CVE-2025-41717 — Config-Upload Code Injection https://cve.radiocsirt.org/vuln/cve-2025-41717 <p><strong>Affected:</strong> Phoenix Contact TC ROUTER 3002T-3G, Phoenix Contact TC ROUTER 2002T-3G, Phoenix Contact TC ROUTER 3002T-4G, Phoenix Contact TC ROUTER 3002T-4G GL, Phoenix Contact TC ROUTER 5004T-5G EU, Phoenix Contact TC ROUTER 3002T-4G VZW, Phoenix Contact TC ROUTER 3002T-4G ATT, Phoenix Contact TC ROUTER 2002T-4G, Phoenix Contact CLOUD CLIENT 1101T-TX/TX, Phoenix Contact TC CLOUD CLIENT 1002-4G ATT and 1 more</p> <p>An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation (&#39;Code Injection’).</p> <p><strong>Affected:</strong> Phoenix Contact TC ROUTER 3002T-3G, Phoenix Contact TC ROUTER 2002T-3G, Phoenix Contact TC ROUTER 3002T-4G, Phoenix Contact TC ROUTER 3002T-4G GL, Phoenix Contact TC ROUTER 5004T-5G EU, Phoenix Contact TC ROUTER 3002T-4G VZW, Phoenix Contact TC ROUTER 3002T-4G ATT, Phoenix Contact TC ROUTER 2002T-4G, Phoenix Contact CLOUD CLIENT 1101T-TX/TX, Phoenix Contact TC CLOUD CLIENT 1002-4G ATT and 1 more</p> <p>An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation (&#39;Code Injection’).</p> https://cve.radiocsirt.org/vuln/cve-2025-41717