CVE-2024-43385: Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
Published Sep 10, 2024
·Updated
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXYHTTPPORT in mGuard devices.
Affected Software
72 affected components
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 3g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 3g Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2 Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx
All of the following
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
All of the following
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pcie4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000
All of the following
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pci4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000
All of the following
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt Vpn
All of the following
Phoenixcontact Fl Mguard Gt\/gt Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx
All of the following
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx Vpn
All of the following
Phoenixcontact Fl Mguard Core Tx Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx
All of the following
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<8.9.3
Phoenixcontact Fl Mguard Centerport Vpn-1000
All of the following
Phoenixcontact Fl Mguard 4305 Firmware<10.4.1
Phoenixcontact Fl Mguard 4305
All of the following
Phoenixcontact Fl Mguard 4302 Firmware<10.4.1
Phoenixcontact Fl Mguard 4302
All of the following
Phoenixcontact Fl Mguard 4102 Pcie Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pcie
All of the following
Phoenixcontact Fl Mguard 4102 Pci Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pci
All of the following
Phoenixcontact Fl Mguard 2105 Firmware<10.4.1
Phoenixcontact Fl Mguard 2105
All of the following
Phoenixcontact Fl Mguard 2102 Firmware<10.4.1
Phoenixcontact Fl Mguard 2102
Event History
Sep 10, 2024
CVE Published
via MITRE·08:43 AM
Data Sourced
via MITRE·08:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43385?
CVE-2024-43385 is classified as a low severity vulnerability.
2
How do I fix CVE-2024-43385?
To fix CVE-2024-43385, update the affected Phoenix Contact mGuard devices to firmware version 8.9.3 or later.
3
What types of devices are affected by CVE-2024-43385?
CVE-2024-43385 affects various Phoenix Contact mGuard devices, particularly with specific VPN firmware versions.
4
Who can exploit CVE-2024-43385?
A low privileged remote attacker can exploit CVE-2024-43385 to execute arbitrary OS commands as root.
5
What is the cause of CVE-2024-43385?
CVE-2024-43385 is caused by improper neutralization of special elements in the variable PROXY_HTTP_PORT.