← CVE Intelligence

CVE-2024-43390

Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices PUBLISHED

Description (CNA)

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / FL MGUARD 2102affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 2105affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4102 PCIaffected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4102 PCIEaffected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4302affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD 4305affected 0 before 10.4.1
PHOENIX CONTACT / FL MGUARD CENTERPORT VPN-1000affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD CORE TXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD CORE TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD DELTA TX/TXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD DELTA TX/TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD GT/GTaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD GT/GT VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCI4000affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCI4000 VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCIE4000affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD PCIE4000 VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS2000 TX/TX-Baffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS2000 TX/TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS2005 TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TX-Maffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TX-Paffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4000 TX/TX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4004 TX/DTXaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD RS4004 TX/DTX VPNaffected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD SMART2affected 0 before 8.9.3
PHOENIX CONTACT / FL MGUARD SMART2 VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 3G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 4G ATT VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 4G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS2000 4G VZW VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 3G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 4G ATT VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 4G VPNaffected 0 before 8.9.3
PHOENIX CONTACT / TC MGUARD RS4000 4G VZW VPNaffected 0 before 8.9.3

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.