CVE-2022-3480: falha de alta gravidade em PHOENIX CONTACT FL MGUARD CENTERPORT
Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.9%
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
PHOENIX CONTACT · FL MGUARD CENTERPORTPHOENIX CONTACT · FL MGUARD CENTERPORT VPN-1000PHOENIX CONTACT · FL MGUARD CORE TXPHOENIX CONTACT · FL MGUARD CORE TX VPNPHOENIX CONTACT · FL MGUARD DELTA TX/TXPHOENIX CONTACT · FL MGUARD DELTA TX/TX VPNPHOENIX CONTACT · FL MGUARD GT/GTPHOENIX CONTACT · FL MGUARD GT/GT VPNPHOENIX CONTACT · FL MGUARD PCI4000PHOENIX CONTACT · FL MGUARD PCI4000 VPNPHOENIX CONTACT · FL MGUARD PCIE4000PHOENIX CONTACT · FL MGUARD PCIE4000 VPNPHOENIX CONTACT · FL MGUARD RS2000 TX/TX-BPHOENIX CONTACT · FL MGUARD RS2000 TX/TX VPNPHOENIX CONTACT · FL MGUARD RS2005 TX VPNPHOENIX CONTACT · FL MGUARD RS4000 TX/TXPHOENIX CONTACT · FL MGUARD RS4000 TX/TX-MPHOENIX CONTACT · FL MGUARD RS4000 TX/TX-PPHOENIX CONTACT · FL MGUARD RS4000 TX/TX VPNPHOENIX CONTACT · FL MGUARD RS4004 TX/DTXPHOENIX CONTACT · FL MGUARD RS4004 TX/DTX VPNPHOENIX CONTACT · FL MGUARD SMART2PHOENIX CONTACT · FL MGUARD SMART2 VPNPHOENIX CONTACT · TC MGUARD RS2000 3G VPNPHOENIX CONTACT · TC MGUARD RS2000 4G ATT VPNPHOENIX CONTACT · TC MGUARD RS2000 4G VPNPHOENIX CONTACT · TC MGUARD RS2000 4G VZW VPNPHOENIX CONTACT · TC MGUARD RS4000 3G VPNPHOENIX CONTACT · TC MGUARD RS4000 4G ATT VPNPHOENIX CONTACT · TC MGUARD RS4000 4G VPNPHOENIX CONTACT · TC MGUARD RS4000 4G VZW VPNCVEs relacionadas — PHOENIX CONTACT FL MGUARD CENTERPORT
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7699HIGHPhoenix Contact: OS command execution in MGUARD productsEPSS 0.8%CVE-2024-43386HIGHPhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.EPSS 0.7%CVE-2024-43385HIGHPhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devicesEPSS 0.7%CVE-2023-2673MEDIUMPHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationEPSS 0.6%CVE-2024-43388HIGHPhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devicesEPSS 0.6%CVE-2024-43387HIGHPhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devicesEPSS 0.6%