GCVE - cpe:2.3:h:phoenixcontact:tc_router_2002t-3g:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:phoenixcontact:tc_router_2002t-3g:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Phoenixcontact (`ad43784c-598b-51b1-a640-9cd70ab4c265`)
Product	Tc Router 2002T 3G (`73ea3103-68d8-5b74-9112-16cca5336baf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-9436`	not_vulnerable	2026-06-08 05:28:01.727392	Details available PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated users to inject system commands through a modified POST request to a specific URL. Published: 2020-03-12T13:22:42.000Z Updated: 2024-08-04T10:26:16.212Z Open on db.gcve.eu Reference links https://cert.vde.com/en-us/advisories/ https://cert.vde.com/en-us/advisories/vde-2020-003 http://seclists.org/fulldisclosure/2020/Mar/15 http://packetstormsecurity.com/files/156729/Phoenix-Contact-TC-Router-TC-Cloud-Client-Command-Injection.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9435`	not_vulnerable	2026-06-08 05:28:01.719493	Details available PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices contain a hardcoded certificate (and key) that is used by default for web-based services on the device. Impersonation, man-in-the-middle, or passive decryption attacks are possible if the generic certificate is not replaced by a device-specific certificate during installation. Published: 2020-03-12T13:25:33.000Z Updated: 2024-08-04T10:26:16.091Z Open on db.gcve.eu Reference links https://cert.vde.com/en-us/advisories/ https://cert.vde.com/en-us/advisories/vde-2020-003 http://seclists.org/fulldisclosure/2020/Mar/15 http://packetstormsecurity.com/files/156729/Phoenix-Contact-TC-Router-TC-Cloud-Client-Command-Injection.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.