CVE-2023-1109— PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-1109
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
PHOENIX CONTACT ENERGY AXC PU 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHOENIX CONTACT ENERGY AXC PU是德国菲尼克斯电气（PHOENIX CONTACT）公司的一种用于能源管理的设备，通常用于监测和控制太阳能和风能系统中的能源流。 PHOENIX CONTACT ENERGY AXC PU V04.15.00.00之前版本存在路径遍历漏洞，该漏洞源于前端受限用户可以通过 Web 服务的上传和下载功能使用特制的 URL 在整个文件系统中访问、读取、写入和创建文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PHOENIX CONTACT | ENERGY AXC PU (1264327) | V01.00.00.00 ~ V04.15.00.00 | - | |
| PHOENIX CONTACT | SMARTRTU AXC SG (1110435) | V01.00.00.00 ~ V01.08.00.02 | - | |
| PHOENIX CONTACT | SMARTRTU AXC IG (1264328) | V01.00.00.00 ~ V01.02.00.01 | - | |
| PHOENIX CONTACT | Infobox (1169323 ) | V01.00.00.00 ~ V02.02.00.00 | - |
II. Public POCs for CVE-2023-1109
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-1109
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: PHOENIX CONTACT
- CVE-2024-43384
Phoenix Contact: Improper removal of sensitive information i - CVE-2026-22323
Cross‑Site Request Forgery in Link Aggregation Configuration - CVE-2026-22322
Stored Cross‑Site Scripting in Link Aggregation Name Handlin - CVE-2026-22321
Stack-Based Buffer Overflow in CLI Login Username Handling o - CVE-2026-22320
Stack-Based Buffer Overflow in TFTP File-Transfer Command Ha
Same weakness: CWE-22
- CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path t - CVE-2022-50956
WordPress Plugin amministrazione-aperta 3.7.3 Local File Rea - CVE-2026-8215
Industrial Application Software IAS Canias ERP RMI iasReques - CVE-2026-42605
AzuraCast: Path Traversal in `currentDirectory` Parameter En - CVE-2026-42574
apko dirFS has a symlink-following path traversal that allow
V. Comments for CVE-2023-1109
No comments yet