CVE-2022-3480: Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
First published: Tue Nov 15 2022(Updated: )
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Phoenixcontact Mguard Centerport Firmware | <8.9.0 | |
| Phoenixcontact Mguard Centerport | ||
| Phoenixcontact Fl Mguard Centerport Vpn-1000 | <8.9.0 | |
| Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware | ||
| Phoenix Contact FL MGuard Core TX Firmware | <8.9.0 | |
| Phoenix Contact FL Mguard Core Tx | ||
| Phoenix Contact FL MGuard Core TX VPN Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard Core TX VPN Firmware | ||
| Phoenix Contact FL Mguard Delta TX/TX Firmware | <8.9.0 | |
| Phoenix Contact FL Mguard Delta TX/TX | ||
| Phoenixcontact Fl Mguard Delta Tx/tx Vpn Firmware | <8.9.0 | |
| Phoenixcontact FL Mguard Delta TX/TX VPN | ||
| Phoenixcontact Fl Mguard Gt/gt Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard GT/GT | ||
| Phoenixcontact FL Mguard GT/GT VPN Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard GT/GT VPN | ||
| Phoenixcontact Fl Mguard Pcie4000 Firmware | <8.9.0 | |
| Phoenixcontact FL MGuard PCI4000 VPN | ||
| Phoenixcontact Mguard Pci4000 Vpn Firmware | <8.9.0 | |
| Phoenix Contact mGuard PCI4000 VPN | ||
| Phoenixcontact Fl Mguard Pcie4000 Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard PCIe 4000 | ||
| Phoenix Contact FL Mguard PCIe4000 VPN Firmware | <8.9.0 | |
| Phoenix Contact FL Mguard PCIe4000 VPN | ||
| Phoenixcontact Fl Mguard Rs2000 Tx/tx-b Firmware | <8.9.0 | |
| Phoenixcontact FL Mguard RS2000 Tx/Tx-b | ||
| Phoenix Contact FL MGUARD RS2000 TX/TX VPN Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard RS2000 TX/TX VPN | ||
| Phoenix Contact FL MGuard RS2005 TX VPN | <8.9.0 | |
| Phoenix Contact FL MGuard RS2005 TX VPN | ||
| Phoenixcontact Fl Mguard Rs4000 Tx/tx Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard RS4000 Tx/TX | ||
| Phoenix Contact FL MGUARD RS4000 TX/TX-M Firmware | <8.9.0 | |
| Phoenixcontact Fl Mguard Rs4000 Tx/tx-m | ||
| Phoenixcontact Fl Mguard Rs4000 Tx/tx-p Firmware | <8.9.0 | |
| Phoenix Contact FL MGUARD RS4000 TX/TX-P | ||
| Phoenixcontact FL Mguard RS4000 TX/TX VPN Firmware | <8.9.0 | |
| Phoenixcontact FL Mguard RS4000 Tx/TX VPN | ||
| Phoenixcontact Fl Mguard Rs4004 Tx/dtx Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard RS4004 Tx/Dtx | ||
| Phoenix Contact FL MGuard RS4004 TX/DX VPN Firmware | <8.9.0 | |
| Phoenix Contact FL MGuard RS4004 Tx/Dtx VPN | ||
| Phoenixcontact FL Mguard Smart2 | <8.9.0 | |
| Phoenixcontact FL Mguard Smart2 | ||
| Phoenix Contact FL MGUARD SMART2 VPN Firmware | <8.9.0 | |
| Phoenixcontact FL Mguard Smart2 | ||
| Phoenixcontact Tc Mguard Rs2000 3g Vpn | <8.9.0 | |
| Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware | ||
| Phoenix Contact TC MGuard RS2000 4G ATT VPN | <8.9.0 | |
| Phoenix Contact TC MGuard RS2000 4G AT&T VPN Firmware | ||
| Phoenix Contact TC MGuard RS2000 4G AT&T VPN Firmware | <8.9.0 | |
| Phoenixcontact Mguard Rs2000 4g Vpn | ||
| Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware | <8.9.0 | |
| Phoenix Contact TC Mguard RS2000 4G VZW VPN | ||
| Phoenix Contact mGuard RS4000 3G VPN | <8.9.0 | |
| Phoenix Contact TC Mguard RS4000 3G VPN | ||
| Phoenix Contact TC Mguard RS4000 4G AT&T VPN | <8.9.0 | |
| Phoenix Contact TC Mguard RS4000 4G AT&T VPN | ||
| Phoenix Contact mGuard RS4000 4G VPN | <8.9.0 | |
| Phoenix Contact mGuard RS4000 4G VPN | ||
| Phoenix Contact TC Mguard RS4000 4G VZW VPN Firmware | <8.9.0 | |
| Phoenix Contact TC Mguard RS4000 4G VZW VPN Firmware |
Remedy
Upgrade to firmware version >= 8.9.0
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-3480?
CVE-2022-3480 has a critical severity rating as it allows an unauthenticated remote denial-of-service attack.
How do I fix CVE-2022-3480?
To fix CVE-2022-3480, upgrade the affected Phoenix Contact FL MGuard and TC MGuard devices to a version greater than 8.9.0.
What devices are affected by CVE-2022-3480?
CVE-2022-3480 affects various models of Phoenix Contact FL and TC MGuard devices running firmware versions below 8.9.0.
What type of attack is described in CVE-2022-3480?
CVE-2022-3480 describes a remote denial-of-service attack that exploits a large number of unauthenticated HTTPS connections.
Is CVE-2022-3480 patched in the latest firmware?
Yes, CVE-2022-3480 is patched in firmware version 8.9.0 and later for affected devices.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- agent/title
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/phoenixcontact
- canonical/phoenixcontact mguard centerport firmware
- canonical/phoenixcontact mguard centerport
- canonical/phoenixcontact fl mguard centerport vpn-1000
- canonical/phoenixcontact fl mguard centerport vpn-1000 firmware
- canonical/phoenix contact fl mguard core tx firmware
- canonical/phoenix contact fl mguard core tx
- canonical/phoenix contact fl mguard core tx vpn firmware
- canonical/phoenix contact fl mguard delta tx/tx firmware
- canonical/phoenix contact fl mguard delta tx/tx
- canonical/phoenixcontact fl mguard delta tx/tx vpn firmware
- canonical/phoenixcontact fl mguard delta tx/tx vpn
- canonical/phoenixcontact fl mguard gt/gt firmware
- canonical/phoenix contact fl mguard gt/gt
- canonical/phoenixcontact fl mguard gt/gt vpn firmware
- canonical/phoenix contact fl mguard gt/gt vpn
- canonical/phoenixcontact fl mguard pcie4000 firmware
- canonical/phoenixcontact fl mguard pci4000 vpn
- canonical/phoenixcontact mguard pci4000 vpn firmware
- canonical/phoenix contact mguard pci4000 vpn
- canonical/phoenix contact fl mguard pcie 4000
- canonical/phoenix contact fl mguard pcie4000 vpn firmware
- canonical/phoenix contact fl mguard pcie4000 vpn
- canonical/phoenixcontact fl mguard rs2000 tx/tx-b firmware
- canonical/phoenixcontact fl mguard rs2000 tx/tx-b
- canonical/phoenix contact fl mguard rs2000 tx/tx vpn firmware
- canonical/phoenix contact fl mguard rs2000 tx/tx vpn
- canonical/phoenix contact fl mguard rs2005 tx vpn
- canonical/phoenixcontact fl mguard rs4000 tx/tx firmware
- canonical/phoenix contact fl mguard rs4000 tx/tx
- canonical/phoenix contact fl mguard rs4000 tx/tx-m firmware
- canonical/phoenixcontact fl mguard rs4000 tx/tx-m
- canonical/phoenixcontact fl mguard rs4000 tx/tx-p firmware
- canonical/phoenix contact fl mguard rs4000 tx/tx-p
- canonical/phoenixcontact fl mguard rs4000 tx/tx vpn firmware
- canonical/phoenixcontact fl mguard rs4000 tx/tx vpn
- canonical/phoenixcontact fl mguard rs4004 tx/dtx firmware
- canonical/phoenix contact fl mguard rs4004 tx/dtx
- canonical/phoenix contact fl mguard rs4004 tx/dx vpn firmware
- canonical/phoenix contact fl mguard rs4004 tx/dtx vpn
- canonical/phoenixcontact fl mguard smart2
- canonical/phoenix contact fl mguard smart2 vpn firmware
- canonical/phoenixcontact tc mguard rs2000 3g vpn
- canonical/phoenixcontact tc mguard rs2000 3g vpn firmware
- canonical/phoenix contact tc mguard rs2000 4g att vpn
- canonical/phoenix contact tc mguard rs2000 4g at&t vpn firmware
- canonical/phoenixcontact mguard rs2000 4g vpn
- canonical/phoenixcontact tc mguard rs2000 4g vpn firmware
- canonical/phoenix contact tc mguard rs2000 4g vzw vpn
- canonical/phoenix contact mguard rs4000 3g vpn
- canonical/phoenix contact tc mguard rs4000 3g vpn
- canonical/phoenix contact tc mguard rs4000 4g at&t vpn
- canonical/phoenix contact mguard rs4000 4g vpn
- canonical/phoenix contact tc mguard rs4000 4g vzw vpn firmware