CVE-2023-2673: falha de média gravidade em PHOENIX CONTACT FL MGUARD 2102
PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.6%
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
PHOENIX CONTACT · FL MGUARD 2102PHOENIX CONTACT · FL MGUARD 4102 PCIPHOENIX CONTACT · FL MGUARD 4102 PCIEPHOENIX CONTACT · FL MGUARD 4302PHOENIX CONTACT · FL MGUARD CENTERPORTPHOENIX CONTACT · FL MGUARD CENTERPORT VPN-1000PHOENIX CONTACT · FL MGUARD CORE TXPHOENIX CONTACT · FL MGUARD CORE TX VPNPHOENIX CONTACT · FL MGUARD DELTA TX/TXPHOENIX CONTACT · FL MGUARD DELTA TX/TX VPNPHOENIX CONTACT · FL MGUARD GT/GTPHOENIX CONTACT · FL MGUARD GT/GT VPNPHOENIX CONTACT · FL MGUARD PCI4000PHOENIX CONTACT · FL MGUARD PCI4000 VPNPHOENIX CONTACT · FL MGUARD PCIE4000PHOENIX CONTACT · FL MGUARD PCIE4000 VPNPHOENIX CONTACT · FL MGUARD RS2000 TX/TX-BPHOENIX CONTACT · FL MGUARD RS2000 TX/TX VPNPHOENIX CONTACT · FL MGUARD RS2005 TX VPNPHOENIX CONTACT · FL MGUARD RS4000 TX/TX-MPHOENIX CONTACT · FL MGUARD RS4000 TX/TX-PPHOENIX CONTACT · FL MGUARD RS4000 TX/TX VPNPHOENIX CONTACT · FL MGUARD RS4004 TX/DTXPHOENIX CONTACT · FL MGUARD RS4004 TX/DTX VPNPHOENIX CONTACT · FL MGUARD SMART2PHOENIX CONTACT · FL MGUARD SMART2 VPNCVEs relacionadas — PHOENIX CONTACT FL MGUARD 2102
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7699HIGHPhoenix Contact: OS command execution in MGUARD productsEPSS 0.8%CVE-2024-43386HIGHPhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.EPSS 0.7%CVE-2024-43385HIGHPhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devicesEPSS 0.7%CVE-2024-43388HIGHPhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devicesEPSS 0.6%CVE-2024-43387HIGHPhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devicesEPSS 0.6%CVE-2024-43393HIGHPhoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devicesEPSS 0.5%