← CVE Intelligence

CVE-2024-43387

Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices PUBLISHED

Description (CNA)

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / FL MGUARD 2102affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 2105affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4102 PCIaffected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4102 PCIEaffected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4302affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4305affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD CENTERPORT VPN-1000affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD CORE TXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD CORE TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD DELTA TX/TXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD DELTA TX/TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD GT/GTaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD GT/GT VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCI4000affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCI4000 VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCIE4000affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCIE4000 VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS2000 TX/TX-Baffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS2000 TX/TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS2005 TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TX-Maffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TX-Paffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4004 TX/DTXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4004 TX/DTX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD SMART2affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD SMART2 VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 3G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 4G ATT VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 4G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 4G VZW VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 3G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 4G ATT VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 4G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 4G VZW VPNaffected 0 before 8.9.3

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.