CVE-2023-2673: PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
Published Jun 13, 2023
·Updated
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
Affected Software
104 affected components
All of the following
Phoenixcontact Fl Mguard 2102
Phoenixcontact Fl Mguard 2102 Firmware<=10.1.1
All of the following
Phoenixcontact Fl Mguard 4102 Pci
Phoenixcontact Fl Mguard 4102 Pci Firmware<=10.1.1
All of the following
Phoenixcontact Fl Mguard 4102 Pcie
Phoenixcontact Fl Mguard 4102 Pcie Firmware<=10.1.1
All of the following
Phoenixcontact Fl Mguard 4302
Phoenixcontact Fl Mguard 4302 Firmware<=10.1.1
All of the following
Phoenixcontact Fl Mguard Centerport
Phoenixcontact Fl Mguard Centerport Firmware<=8.9.0
All of the following
Phoenixcontact Fl Mguard Centerport Vpn-1000
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<=8.9.0
All of the following
Phoenixcontact Fl Mguard Core Tx
Phoenixcontact Fl Mguard Core Tx Firmware<=8.9.0
All of the following
Phoenixcontact Fl Mguard Core Tx Vpn
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<=8.9.0
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<=8.9.0
Phoenixcontact Fl Mguard Delta Tx\/tx
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Gt\/gt Firmware<=8.9.0
Phoenixcontact Fl Mguard Gt\/gt
All of the following
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Gt\/gt Vpn
All of the following
Phoenixcontact Fl Mguard Pci4000 Firmware<=8.9.0
Phoenixcontact Fl Mguard Pci4000
All of the following
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Pci4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pcie4000 Firmware<=8.9.0
Phoenixcontact Fl Mguard Pcie4000
All of the following
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Pcie4000 Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Firmware<=8.9.0
Phoenixcontact Fl Mguard Smart2
All of the following
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Smart2 Vpn
Phoenixcontact Fl Mguard 2102 Firmware<=10.1.1
Phoenixcontact Fl Mguard 2102
Phoenixcontact Fl Mguard 4102 Pci Firmware<=10.1.1
Phoenixcontact Fl Mguard 4102 Pci
Phoenixcontact Fl Mguard 4102 Pcie Firmware<=10.1.1
Phoenixcontact Fl Mguard 4102 Pcie
Phoenixcontact Fl Mguard 4302 Firmware<=10.1.1
Phoenixcontact Fl Mguard 4302
Phoenixcontact Fl Mguard Centerport Firmware<=8.9.0
Phoenixcontact Fl Mguard Centerport
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<=8.9.0
Phoenixcontact Fl Mguard Centerport Vpn-1000
Phoenixcontact Fl Mguard Core Tx Firmware<=8.9.0
Phoenixcontact Fl Mguard Core Tx
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Core Tx Vpn
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<=8.9.0
Phoenixcontact Fl Mguard Delta Tx\/tx
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
Phoenixcontact Fl Mguard Gt\/gt Firmware<=8.9.0
Phoenixcontact Fl Mguard Gt\/gt
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Gt\/gt Vpn
Phoenixcontact Fl Mguard Pci4000 Firmware<=8.9.0
Phoenixcontact Fl Mguard Pci4000
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Pci4000 Vpn
Phoenixcontact Fl Mguard Pcie4000 Firmware<=8.9.0
Phoenixcontact Fl Mguard Pcie4000
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Pcie4000 Vpn
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
Phoenixcontact Fl Mguard Smart2 Firmware<=8.9.0
Phoenixcontact Fl Mguard Smart2
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<=8.9.0
Phoenixcontact Fl Mguard Smart2 Vpn
Event History
Jun 13, 2023
CVE Published
via MITRE·06:16 AM
Data Sourced
via MITRE·06:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this PHOENIX CONTACT FL/TC MGUARD vulnerability?
The vulnerability ID for this PHOENIX CONTACT FL/TC MGUARD vulnerability is CVE-2023-2673.
2
What is the severity level of the CVE-2023-2673 vulnerability?
The severity level of the CVE-2023-2673 vulnerability is medium, with a severity value of 5.3.
3
What is the description of the CVE-2023-2673 vulnerability?
The CVE-2023-2673 vulnerability is an Improper Input Validation vulnerability that allows UDP packets to bypass filter rules and access the solely connected device behind the MGUARD, thereby enabling flooding attacks.
4
Which software versions are affected by the CVE-2023-2673 vulnerability?
The CVE-2023-2673 vulnerability affects multiple versions of PHOENIX CONTACT FL/TC MGUARD Family, including firmware versions up to and inclusive of 10.1.1 for various models.
5
How can I fix the CVE-2023-2673 vulnerability?
To fix the CVE-2023-2673 vulnerability, it is recommended to update the firmware of the affected PHOENIX CONTACT FL/TC MGUARD Family devices to versions that are not vulnerable.