Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistCERTVDECVELIST:CVE-2024-43387
HistorySep 10, 2024 - 8:43 a.m.

CVE-2024-43387 Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices

2024-09-1008:43:54
CWE-78
CERTVDE
www.cve.org
1
cve-2024-43387
phoenix contact
access files
improper neutralization
mguard devices
remote attacker
read files
write files
email_relay_password

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.1%

JSON

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 2102",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 2105",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4102 PCI",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4102 PCIE",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4302",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4305",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD CENTERPORT VPN-1000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD CORE TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD CORE TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD DELTA TX/TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD DELTA TX/TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD GT/GT",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD GT/GT VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCI4000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCI4000 VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCIE4000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCIE4000 VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS2000 TX/TX-B",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS2000 TX/TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS2005 TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX-M",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX-P",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4004 TX/DTX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4004 TX/DTX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD SMART2",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD SMART2 VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 3G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 4G ATT VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 4G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 4G VZW VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 3G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 4G ATT VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 4G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 4G VZW VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Related

vulnrichment 1
nvd 1
cve 1
vulnrichment
vulnrichment
CVE-2024-43387 Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices
2024-09-10 08:43:54
nvd
nvd
CVE-2024-43387
2024-09-10 09:15:04
cve
cve
CVE-2024-43387
2024-09-10 09:15:04

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.1%

JSON
Related for CVELIST:CVE-2024-43387
vulnrichment1nvd1cve1