CVE-2017-5159: Critical severity Phoenixcontact Mguard Firmware vulnerability
An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
On Phoenix Contact mGuard devices updated to Version 8.4.0 via the update-upload facility, reset/change the admin user password from the default value after the update succeeds.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5159?
CVE-2017-5159 has been classified as a medium severity vulnerability due to the risk of unauthorized access from a reset admin password.
How do I fix CVE-2017-5159?
To fix CVE-2017-5159, after updating to Version 8.4.0, immediately change the admin password from the default value.
What devices are affected by CVE-2017-5159?
CVE-2017-5159 affects Phoenix Contact mGuard devices that have been updated to Version 8.4.0.
When was CVE-2017-5159 discovered?
CVE-2017-5159 was discovered in January 2017.
How does CVE-2017-5159 impact security?
CVE-2017-5159 impacts security by potentially allowing an unauthorized user to gain admin access if the password is not changed after the update.