Critical · published August 8, 2023
🚨 An unauthenticated remote attacker can exploit a reflective XSS in PHOENIX CONTACT's TC ROUTER and TC CLOUD CLIENT, making it possible for malicious code to run in the user's browser without breaking a sweat! 🔥 Think of it like a dinner invitation where the host told you to bring your own ingredients, but they forgot to check for allergens — without any safety checks, anyone could serve up something harmful! An attacker could craft a malicious link that, once clicked by a user, could execute JavaScript in their browser, giving the attacker full control to steal sensitive data, hijack sessions, or execute other harmful actions. This is absolutely devastating, as it compromises user trust and system integrity!
Think of it like a dinner invitation where the host told you to bring your own ingredients, but they forgot to check for allergens — without any safety checks, anyone could serve up something harmful! The vulnerability resides in the license viewer page of the affected devices, where an unauthenticated XSS flaw allows attackers to inject and execute arbitrary scripts within the context of the user's session. This occurs because the application fails to properly validate user input before rendering it back to the page.
An attacker could craft a malicious link that, once clicked by a user, could execute JavaScript in their browser, giving the attacker full control to steal sensitive data, hijack sessions, or execute other harmful actions. This is absolutely devastating, as it compromises user trust and system integrity! Upgrade to TC ROUTER and TC CLOUD CLIENT version 2.07.2 or later, and ensure CLOUD CLIENT 1101T-TX/TX is updated to version 2.06.10 or higher. Additionally, review and sanitize all user inputs to prevent future XSS vulnerabilities. You've got this! Follow these steps and you'll ensure your system is safe and sound. 🛡️