CVE-2024-43392: Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices
Published Sep 10, 2024
·Updated
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWINCOMING.FROMIP FWINCOMING.INIP FWOUTGOING.FROMIP FWOUTGOING.INIP environment variable which can lead to a DoS.
Affected Software
60 affected components
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 3g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 3g Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2 Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx
All of the following
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
All of the following
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pcie4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000
All of the following
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pci4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000
All of the following
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt Vpn
All of the following
Phoenixcontact Fl Mguard Gt\/gt Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx
All of the following
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx Vpn
All of the following
Phoenixcontact Fl Mguard Core Tx Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx
All of the following
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<8.9.3
Phoenixcontact Fl Mguard Centerport Vpn-1000
Event History
Sep 10, 2024
CVE Published
via MITRE·08:44 AM
Data Sourced
via MITRE·08:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43392?
CVE-2024-43392 has a low severity rating, indicating that it poses minimal risk to affected systems.
2
How do I fix CVE-2024-43392?
To fix CVE-2024-43392, update the firmware of affected Phoenixcontact TC Mguard devices to the latest version beyond 8.9.3.
3
Which devices are affected by CVE-2024-43392?
CVE-2024-43392 affects multiple versions of Phoenixcontact TC Mguard devices, including the RS2000 and RS4000 models running firmware versions prior to 8.9.3.
4
Can CVE-2024-43392 be exploited remotely?
Yes, CVE-2024-43392 can be exploited by low privileged remote attackers to execute configuration changes on the firewall services.
5
What types of changes can be made due to CVE-2024-43392?
An attacker exploiting CVE-2024-43392 can change critical configurations such as packet filtering, packet forwarding, and NAT settings.