CVE-2020-9436
PoC ×2—CVSS 3.1
8.8 high
EPSS
3%p85
Published
()
Modified
Description
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated users to inject system commands through a modified POST request to a specific URL.
- Vendors
- phoenixcontact
- Products
- tc router 3002t-4g firmware, tc router 2002t-3g firmware, tc router 3002t-4g vzw firmware, tc router 3002t-4g att firmware, tc cloud client 1002-4g firmware, tc cloud client 1002-txtx firmware
- Weakness
- CWE-78
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.