medium
5.3
CWE
1287 20
Advisory Published
Updated

CVE-2023-2673: PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

First published: Tue Jun 13 2023(Updated: )

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.

Credit: info@cert.vde.com

Affected SoftwareAffected VersionHow to fix
All of
Phoenixcontact Fl Mguard 2102 Firmware
Phoenixcontact FL Mguard<=10.1.1
All of
Phoenix Contact FL MGuard 4102 PCI
Phoenix Contact FL MGuard 4102 PCI Firmware<=10.1.1
All of
Phoenixcontact FL Mguard 4102 Pcie Firmware
Phoenix Contact FL MGuard 4102 PCI Firmware<=10.1.1
All of
Phoenixcontact FL Mguard 4302 Firmware
Phoenix Contact FL Mguard 4302 Firmware<=10.1.1
All of
Phoenixcontact Mguard Centerport
Phoenix Contact FL Mguard Centerport Firmware<=8.9.0
All of
Phoenixcontact FL Mguard Centerport VPN-1000 Firmware
Phoenix Contact FL Mguard Centerport Firmware<=8.9.0
All of
Phoenix Contact FL Mguard Core Tx
Phoenix Contact FL MGuard Core TX Firmware<=8.9.0
All of
Phoenixcontact FL Mguard Core Tx VPN
Phoenix Contact FL MGuard Core TX VPN Firmware<=8.9.0
All of
Phoenix Contact FL Mguard Delta TX/TX Firmware<=8.9.0
Phoenix Contact FL Mguard Delta TX/TX
All of
Phoenixcontact Fl Mguard Delta Tx/tx Vpn Firmware<=8.9.0
Phoenixcontact FL Mguard Delta TX/TX VPN
All of
Phoenixcontact Fl Mguard Gt/gt Firmware<=8.9.0
Phoenix Contact FL MGuard GT/GT
All of
Phoenixcontact FL Mguard GT/GT VPN Firmware<=8.9.0
Phoenix Contact FL MGuard GT/GT VPN
All of
Phoenixcontact Fl Mguard Pcie4000 Firmware<=8.9.0
Phoenixcontact FL MGuard PCI4000 VPN
All of
Phoenixcontact Mguard Pci4000 Vpn Firmware<=8.9.0
Phoenix Contact mGuard PCI4000 VPN
All of
Phoenix Contact FL MGuard PCI4000 Firmware<=8.9.0
Phoenix Contact FL MGuard PCIe 4000
All of
Phoenix Contact FL Mguard PCIe4000 VPN Firmware<=8.9.0
Phoenix Contact FL Mguard PCIe4000 VPN
All of
Phoenixcontact Fl Mguard Rs2000 Tx/tx-b Firmware<=8.9.0
Phoenixcontact FL Mguard RS2000 Tx/Tx-b
All of
Phoenix Contact FL MGUARD RS2000 TX/TX VPN Firmware<=8.9.0
Phoenix Contact FL MGuard RS2000 TX/TX VPN
All of
Phoenixcontact Mguard RS2005 TX VPN Firmware<=8.9.0
Phoenix Contact FL MGuard RS2005 TX VPN
All of
Phoenix Contact FL MGUARD RS4000 TX/TX-M Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx/tx-m
All of
Phoenixcontact Fl Mguard Rs4000 Tx/tx-p Firmware<=8.9.0
Phoenix Contact FL MGUARD RS4000 TX/TX-P
All of
Phoenixcontact FL Mguard RS4000 TX/TX VPN Firmware<=8.9.0
Phoenixcontact FL Mguard RS4000 Tx/TX VPN
All of
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Firmware<=8.9.0
Phoenix Contact FL MGuard RS4004 Tx/Dtx
All of
Phoenix Contact FL MGuard RS4004 TX/DX VPN Firmware<=8.9.0
Phoenix Contact FL MGuard RS4004 Tx/Dtx VPN
All of
Phoenixcontact FL Mguard Smart2<=8.9.0
Phoenix Contact mGuard Smart2
All of
Phoenix Contact FL MGUARD SMART2 VPN Firmware<=8.9.0
Phoenixcontact FL Mguard Smart2
Phoenixcontact FL Mguard<=10.1.1
Phoenixcontact Fl Mguard 2102 Firmware
Phoenix Contact FL MGuard 4102 PCI Firmware<=10.1.1
Phoenix Contact FL MGuard 4102 PCI
Phoenix Contact FL MGuard 4102 PCI Firmware<=10.1.1
Phoenixcontact FL Mguard 4102 Pcie Firmware
Phoenix Contact FL Mguard 4302 Firmware<=10.1.1
Phoenixcontact FL Mguard 4302 Firmware
Phoenix Contact FL Mguard Centerport Firmware<=8.9.0
Phoenixcontact Mguard Centerport
Phoenix Contact FL Mguard Centerport Firmware<=8.9.0
Phoenixcontact FL Mguard Centerport VPN-1000 Firmware
Phoenix Contact FL MGuard Core TX Firmware<=8.9.0
Phoenix Contact FL Mguard Core Tx
Phoenix Contact FL MGuard Core TX VPN Firmware<=8.9.0
Phoenixcontact FL Mguard Core Tx VPN
Phoenix Contact FL Mguard Delta TX/TX Firmware<=8.9.0
Phoenix Contact FL Mguard Delta TX/TX
Phoenixcontact Fl Mguard Delta Tx/tx Vpn Firmware<=8.9.0
Phoenixcontact FL Mguard Delta TX/TX VPN
Phoenixcontact Fl Mguard Gt/gt Firmware<=8.9.0
Phoenix Contact FL MGuard GT/GT
Phoenixcontact FL Mguard GT/GT VPN Firmware<=8.9.0
Phoenix Contact FL MGuard GT/GT VPN
Phoenixcontact Fl Mguard Pcie4000 Firmware<=8.9.0
Phoenixcontact FL MGuard PCI4000 VPN
Phoenixcontact Mguard Pci4000 Vpn Firmware<=8.9.0
Phoenix Contact mGuard PCI4000 VPN
Phoenix Contact FL MGuard PCI4000 Firmware<=8.9.0
Phoenix Contact FL MGuard PCIe 4000
Phoenix Contact FL Mguard PCIe4000 VPN Firmware<=8.9.0
Phoenix Contact FL Mguard PCIe4000 VPN
Phoenixcontact Fl Mguard Rs2000 Tx/tx-b Firmware<=8.9.0
Phoenixcontact FL Mguard RS2000 Tx/Tx-b
Phoenix Contact FL MGUARD RS2000 TX/TX VPN Firmware<=8.9.0
Phoenix Contact FL MGuard RS2000 TX/TX VPN
Phoenixcontact Mguard RS2005 TX VPN Firmware<=8.9.0
Phoenix Contact FL MGuard RS2005 TX VPN
Phoenix Contact FL MGUARD RS4000 TX/TX-M Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx/tx-m
Phoenixcontact Fl Mguard Rs4000 Tx/tx-p Firmware<=8.9.0
Phoenix Contact FL MGUARD RS4000 TX/TX-P
Phoenixcontact FL Mguard RS4000 TX/TX VPN Firmware<=8.9.0
Phoenixcontact FL Mguard RS4000 Tx/TX VPN
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Firmware<=8.9.0
Phoenix Contact FL MGuard RS4004 Tx/Dtx
Phoenix Contact FL MGuard RS4004 TX/DX VPN Firmware<=8.9.0
Phoenix Contact FL MGuard RS4004 Tx/Dtx VPN
Phoenixcontact FL Mguard Smart2<=8.9.0
Phoenix Contact mGuard Smart2
Phoenix Contact FL MGUARD SMART2 VPN Firmware<=8.9.0
Phoenixcontact FL Mguard Smart2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the vulnerability ID for this PHOENIX CONTACT FL/TC MGUARD vulnerability?

    The vulnerability ID for this PHOENIX CONTACT FL/TC MGUARD vulnerability is CVE-2023-2673.

  • What is the severity level of the CVE-2023-2673 vulnerability?

    The severity level of the CVE-2023-2673 vulnerability is medium, with a severity value of 5.3.

  • What is the description of the CVE-2023-2673 vulnerability?

    The CVE-2023-2673 vulnerability is an Improper Input Validation vulnerability that allows UDP packets to bypass filter rules and access the solely connected device behind the MGUARD, thereby enabling flooding attacks.

  • Which software versions are affected by the CVE-2023-2673 vulnerability?

    The CVE-2023-2673 vulnerability affects multiple versions of PHOENIX CONTACT FL/TC MGUARD Family, including firmware versions up to and inclusive of 10.1.1 for various models.

  • How can I fix the CVE-2023-2673 vulnerability?

    To fix the CVE-2023-2673 vulnerability, it is recommended to update the firmware of the affected PHOENIX CONTACT FL/TC MGUARD Family devices to versions that are not vulnerable.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203