Approved changes feed: RSS · Atom

cpe:2.3:o:phoenixcontact:infobox_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductInfobox Firmware (48777ec8-25f9-5257-89bb-9a8966cf1e76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1109 vulnerable 2026-06-08 05:52:33.898403 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
HIGH (8.8)
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service.
Published: 2023-04-17T07:32:24.262Z
Updated: 2025-02-05T21:19:53.289Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.