← Back

Tc Cloud Client 1002 Txtx Firmware

tc_cloud_client_1002-txtx_firmware

Vendor: Phoenixcontact • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9436
1Phoenixcontact
6Tc Cloud Client 1002 4g Firmware
Tc Cloud Client 1002 Txtx FirmwareTc Router 2002t 3g Firmware+3 more
Nov 21, 2024
Mar 12, 2020
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CL...Show more
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated users to inject system commands through a modified POST request to a specific URL.Show less
CVE-2020-9435
1Phoenixcontact
6Tc Cloud Client 1002 4g Firmware
Tc Cloud Client 1002 Txtx FirmwareTc Router 2002t 3g Firmware+3 more
Nov 21, 2024
Mar 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CL...Show more
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices contain a hardcoded certificate (and key) that is used by default for web-based services on the device. Impersonation, man-in-the-middle, or passive decryption attacks are possible if the generic certificate is not replaced by a device-specific certificate during installation.Show less