CVE-2023-1109

Name of the Vulnerable Software and Affected Versions Phoenix Contacts ENERGY AXC PU versions (affected versions not specified)

Description The issue is related to a web service vulnerability that allows an authenticated restricted user of the web frontend to access, read, write, and create files throughout the file system using specially crafted URLs via the upload and download functionality. This may lead to full control of the service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.