CVE:CVE-2023-3526
CNNVD:CNNVD-202308-528
PHOENIX CONTACTs TC ROUTER是德国菲尼克斯电气（PHOENIX CONTACTs）公司的一系列路由器。
PHOENIX CONTACTs TC ROUTER、TC CLOUD CLIENT和CLOUD CLIENT 1101T-TX/TX存在跨站脚本漏洞，该漏洞源于未经身份验证的远程攻击者可以在设备的许可证查看器页面中使用反射型XSS在用户浏览器的上下文中执行代码。
solution:Upgrade phoenixcontact cloud_client_1101t-tx_firmware to a higher version than 2.06.10,and avoid the version (,2.06.10); Upgrade phoenixcontact tc_cloud_client_1002-4g_att_firmware to a higher version than 2.07.2,and avoid the version (,2.07.2); Upgrade phoenixcontact tc_cloud_client_1002-4g_firmware to a higher version than 2.07.2,and avoid the version (,2.07.2); Upgrade phoenixcontact tc_cloud_client_1002-4g_vzw_firmware to a higher version than 2.07.2,and avoid the version (,2.07.2); Upgrade phoenixcontact tc_router_3002t-4g_att_firmware to a higher version than 2.07.2,and avoid the version (,2.07.2); Upgrade phoenixcontact tc_router_3002t-4g_firmware to a higher version than 2.07.2,and avoid the version (,2.07.2); Upgrade phoenixcontact tc_router_3002t-4g_vzw_firmware to a higher version than 2.07.2,and avoid the version (,2.07.2)