CVE-2023-1109

PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service

State: Published
Severity: 8.8 High
Published: Apr 17, 2023
Updated: Feb 5, 2025
Reserved: Mar 1, 2023

Description

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
ENERGY AXC PU (1264327)PHOENIX CONTACT	V01.00.00.00 through V04.15.00.00Affected
SMARTRTU AXC SG (1110435)PHOENIX CONTACT	V01.00.00.00 through V01.08.00.02Affected
SMARTRTU AXC IG (1264328)PHOENIX CONTACT	V01.00.00.00 through V01.02.00.01Affected
Infobox (1169323 )PHOENIX CONTACT	V01.00.00.00 through V02.02.00.00Affected

References

https://cert.vde.com/en/advisories/VDE-2023-003/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.