« Volver al listado

CVE-2023-1109

Estado: ModificadaAlta (8.8)—

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Phoenixcontact — Energy AXC PUPhoenixcontact — Infobox FirmwarePhoenixcontact — Smartrtu AXC IG FirmwarePhoenixcontact — Smartrtu AXC SG Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-1109",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-1109",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-05T21:19:48.861651Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "info@cert.vde.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "info@cert.vde.com",
      "affectedData": [
        {
          "vendor": "PHOENIX CONTACT",
          "product": "ENERGY AXC PU (1264327)",
          "versions": [
            {
              "status": "affected",
              "version": "V01.00.00.00",
              "versionType": "custom",
              "lessThanOrEqual": "V04.15.00.00"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "PHOENIX CONTACT",
          "product": "SMARTRTU AXC SG (1110435)",
          "versions": [
            {
              "status": "affected",
              "version": "V01.00.00.00",
              "versionType": "custom",
              "lessThanOrEqual": "V01.08.00.02"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "PHOENIX CONTACT",
          "product": "SMARTRTU AXC IG (1264328)",
          "versions": [
            {
              "status": "affected",
              "version": "V01.00.00.00",
              "versionType": "custom",
              "lessThanOrEqual": "V01.02.00.01"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "PHOENIX CONTACT",
          "product": "Infobox (1169323 )",
          "versions": [
            {
              "status": "affected",
              "version": "V01.00.00.00",
              "versionType": "custom",
              "lessThanOrEqual": "V02.02.00.00"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2023-04-17T08:15:07.627",
  "references": [
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2023-003/",
      "tags": [
        "Not Applicable"
      ],
      "source": "info@cert.vde.com"
    },
    {
      "url": "https://github.com/advisories/GHSA-w923-8w64-f5gh",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "nvd@nist.gov"
    },
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2023-003/",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "info@cert.vde.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service."
    }
  ],
  "lastModified": "2026-06-17T05:27:08.100",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phoenixcontact:energy_axc_pu:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "667B7404-4720-41E5-B815-9EB2376566D1",
              "versionEndIncluding": "04.15.00.00",
              "versionStartIncluding": "01.00.00.00"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:infobox_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BA39C5A-B6BF-49D9-AAEC-FB38478BAB9B",
              "versionEndIncluding": "02.02.00.00",
              "versionStartIncluding": "01.00.00.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:infobox:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5FA377FD-320C-4479-A34F-297ADF792DC1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:smartrtu_axc_sg_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7191A320-C13F-45C2-8CC1-1EDF5998DCAD",
              "versionEndIncluding": "01.08.00.02",
              "versionStartIncluding": "01.00.00.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:smartrtu_axc_sg:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "195DA1AA-4D07-4BBC-BA68-88399717FDEB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:smartrtu_axc_ig_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37C85EE7-1CBB-4F62-9259-F9272F05155D",
              "versionEndIncluding": "01.02.00.01",
              "versionStartIncluding": "01.00.00.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:smartrtu_axc_ig:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F1CAFD12-9630-4FB5-B802-19189B8E43C4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "info@cert.vde.com"
}