CVE-2023-2673mediumCWE-1287

CVE-2023-2673: medium-severity vulnerability in PHOENIX CONTACT FL MGUARD 2102

PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

Published 13 Jun 2023 · Updated 03 Jan 2025

Follow this CVE + Monitor FL MGUARD + Monitor FL MGUARD RS4004 TX/DTX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Related CVEs — PHOENIX CONTACT FL MGUARD 2102

In the same product, most dangerous first.

CVE-2024-7699HIGHPhoenix Contact: OS command execution in MGUARD productsEPSS 0.8%CVE-2024-43386HIGHPhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.EPSS 0.7%CVE-2024-43385HIGHPhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devicesEPSS 0.7%CVE-2024-43388HIGHPhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devicesEPSS 0.6%CVE-2024-43387HIGHPhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devicesEPSS 0.6%CVE-2024-43393HIGHPhoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devicesEPSS 0.5%

References

https://cert.vde.com/en/advisories/VDE-2023-010/