CVE-2024-43390: falha de alta gravidade em PHOENIX CONTACT FL MGUARD 2102
Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 0.5%
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
PHOENIX CONTACT · FL MGUARD 2102PHOENIX CONTACT · FL MGUARD 2105PHOENIX CONTACT · FL MGUARD 4102 PCIPHOENIX CONTACT · FL MGUARD 4102 PCIEPHOENIX CONTACT · FL MGUARD 4302PHOENIX CONTACT · FL MGUARD 4305PHOENIX CONTACT · FL MGUARD CENTERPORT VPN-1000PHOENIX CONTACT · FL MGUARD CORE TXPHOENIX CONTACT · FL MGUARD CORE TX VPNPHOENIX CONTACT · FL MGUARD DELTA TX/TXPHOENIX CONTACT · FL MGUARD DELTA TX/TX VPNPHOENIX CONTACT · FL MGUARD GT/GTPHOENIX CONTACT · FL MGUARD GT/GT VPNPHOENIX CONTACT · FL MGUARD PCI4000PHOENIX CONTACT · FL MGUARD PCI4000 VPNPHOENIX CONTACT · FL MGUARD PCIE4000PHOENIX CONTACT · FL MGUARD PCIE4000 VPNPHOENIX CONTACT · FL MGUARD RS2000 TX/TX-BPHOENIX CONTACT · FL MGUARD RS2000 TX/TX VPNPHOENIX CONTACT · FL MGUARD RS2005 TX VPNPHOENIX CONTACT · FL MGUARD RS4000 TX/TXPHOENIX CONTACT · FL MGUARD RS4000 TX/TX-MPHOENIX CONTACT · FL MGUARD RS4000 TX/TX-PPHOENIX CONTACT · FL MGUARD RS4000 TX/TX VPNPHOENIX CONTACT · FL MGUARD RS4004 TX/DTXPHOENIX CONTACT · FL MGUARD RS4004 TX/DTX VPNPHOENIX CONTACT · FL MGUARD SMART2PHOENIX CONTACT · FL MGUARD SMART2 VPNPHOENIX CONTACT · TC MGUARD RS2000 3G VPNPHOENIX CONTACT · TC MGUARD RS2000 4G ATT VPNPHOENIX CONTACT · TC MGUARD RS2000 4G VPNPHOENIX CONTACT · TC MGUARD RS2000 4G VZW VPNPHOENIX CONTACT · TC MGUARD RS4000 3G VPNPHOENIX CONTACT · TC MGUARD RS4000 4G ATT VPNPHOENIX CONTACT · TC MGUARD RS4000 4G VPNPHOENIX CONTACT · TC MGUARD RS4000 4G VZW VPNCVEs relacionadas — PHOENIX CONTACT FL MGUARD 2102
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7699HIGHPhoenix Contact: OS command execution in MGUARD productsEPSS 0.8%CVE-2024-43386HIGHPhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.EPSS 0.7%CVE-2024-43385HIGHPhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devicesEPSS 0.7%CVE-2023-2673MEDIUMPHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationEPSS 0.6%CVE-2024-43388HIGHPhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devicesEPSS 0.6%CVE-2024-43387HIGHPhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devicesEPSS 0.6%