CVE-2024-43393: Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
Published Sep 10, 2024
·Updated
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWINCOMING.FROMIP FWINCOMING.INIP FWOUTGOING.FROMIP FWOUTGOING.INIP FWRULESETS.FROMIP FWRULESETS.INIP environment variable which can lead to a DoS.
Affected Software
72 affected components
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 3g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 3g Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2 Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx
All of the following
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
All of the following
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pcie4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000
All of the following
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pci4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000
All of the following
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt Vpn
All of the following
Phoenixcontact Fl Mguard Gt\/gt Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx
All of the following
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx Vpn
All of the following
Phoenixcontact Fl Mguard Core Tx Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx
All of the following
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<8.9.3
Phoenixcontact Fl Mguard Centerport Vpn-1000
All of the following
Phoenixcontact Fl Mguard 4305 Firmware<10.4.1
Phoenixcontact Fl Mguard 4305
All of the following
Phoenixcontact Fl Mguard 4302 Firmware<10.4.1
Phoenixcontact Fl Mguard 4302
All of the following
Phoenixcontact Fl Mguard 4102 Pcie Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pcie
All of the following
Phoenixcontact Fl Mguard 4102 Pci Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pci
All of the following
Phoenixcontact Fl Mguard 2105 Firmware<10.4.1
Phoenixcontact Fl Mguard 2105
All of the following
Phoenixcontact Fl Mguard 2102 Firmware<10.4.1
Phoenixcontact Fl Mguard 2102
Event History
Sep 10, 2024
CVE Published
via MITRE·08:45 AM
Data Sourced
via MITRE·08:45 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43393?
CVE-2024-43393 is classified with a low severity level due to its requirement for low-privileged remote access.
2
How do I fix CVE-2024-43393?
To mitigate CVE-2024-43393, ensure that your firmware is updated to version 8.9.3 or later for the affected Phoenix Contact devices.
3
What systems are affected by CVE-2024-43393?
CVE-2024-43393 affects various Phoenix Contact firmware versions prior to 8.9.3, particularly on tc mGuard routers.
4
What type of attack is possible due to CVE-2024-43393?
CVE-2024-43393 allows low privileged remote attackers to make unauthorized configuration changes to firewall settings.
5
Who can exploit CVE-2024-43393?
CVE-2024-43393 can potentially be exploited by low-privileged remote attackers who have network access to the device.