CVE-2024-43391: Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices
Published Sep 10, 2024
·Updated
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWPORTFORWARDING.SRCIP environment variable which can lead to a DoS.
Affected Software
72 affected components
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 3g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 3g Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2 Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx
All of the following
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
All of the following
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pcie4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000
All of the following
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pci4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000
All of the following
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt Vpn
All of the following
Phoenixcontact Fl Mguard Gt\/gt Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx
All of the following
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx Vpn
All of the following
Phoenixcontact Fl Mguard Core Tx Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx
All of the following
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<8.9.3
Phoenixcontact Fl Mguard Centerport Vpn-1000
All of the following
Phoenixcontact Fl Mguard 4305 Firmware<10.4.1
Phoenixcontact Fl Mguard 4305
All of the following
Phoenixcontact Fl Mguard 4302 Firmware<10.4.1
Phoenixcontact Fl Mguard 4302
All of the following
Phoenixcontact Fl Mguard 4102 Pcie Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pcie
All of the following
Phoenixcontact Fl Mguard 4102 Pci Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pci
All of the following
Phoenixcontact Fl Mguard 2105 Firmware<10.4.1
Phoenixcontact Fl Mguard 2105
All of the following
Phoenixcontact Fl Mguard 2102 Firmware<10.4.1
Phoenixcontact Fl Mguard 2102
Event History
Sep 10, 2024
CVE Published
via MITRE·08:44 AM
Data Sourced
via MITRE·08:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43391?
CVE-2024-43391 has a low severity rating, but it can allow remote attackers to perform unauthorized configuration changes.
2
How do I fix CVE-2024-43391?
To mitigate CVE-2024-43391, upgrade the firewall services to versions beyond 8.9.3 for the affected Phoenix Contact Tc Mguard firmware.
3
Which devices are affected by CVE-2024-43391?
CVE-2024-43391 affects several Phoenix Contact Tc Mguard firewall devices running firmware versions up to 8.9.3.
4
What can a successful exploit of CVE-2024-43391 lead to?
Exploitation of CVE-2024-43391 may lead to denial of service (DoS) conditions through unauthorized configuration changes.
5
Is CVE-2024-43391 being actively exploited?
There are no specific indications of active exploitation for CVE-2024-43391, but the vulnerability poses a potential threat.