CVE-2024-7734: Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
Published Sep 10, 2024
·Updated
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
Affected Software
72 affected components
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs4000 3g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn
All of the following
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware<8.9.3
Phoenixcontact Tc Mguard Rs2000 3g Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2 Vpn
All of the following
Phoenixcontact Fl Mguard Smart2 Firmware<8.9.3
Phoenixcontact Fl Mguard Smart2
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-p
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx-m
All of the following
Phoenixcontact Fl Mguard Rs4000 Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Rs4000 Tx\/tx
All of the following
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2005 Tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b Firmware<8.9.3
Phoenixcontact Fl Mguard Rs2000 Tx\/tx-b
All of the following
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pcie4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pcie4000
All of the following
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000 Vpn
All of the following
Phoenixcontact Fl Mguard Pci4000 Firmware<8.9.3
Phoenixcontact Fl Mguard Pci4000
All of the following
Phoenixcontact Fl Mguard Gt\/gt Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt Vpn
All of the following
Phoenixcontact Fl Mguard Gt\/gt Firmware<8.9.3
Phoenixcontact Fl Mguard Gt\/gt
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx Vpn
All of the following
Phoenixcontact Fl Mguard Delta Tx\/tx Firmware<8.9.3
Phoenixcontact Fl Mguard Delta Tx\/tx
All of the following
Phoenixcontact Fl Mguard Core Tx Vpn Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx Vpn
All of the following
Phoenixcontact Fl Mguard Core Tx Firmware<8.9.3
Phoenixcontact Fl Mguard Core Tx
All of the following
Phoenixcontact Fl Mguard Centerport Vpn-1000 Firmware<8.9.3
Phoenixcontact Fl Mguard Centerport Vpn-1000
All of the following
Phoenixcontact Fl Mguard 4305 Firmware<10.4.1
Phoenixcontact Fl Mguard 4305
All of the following
Phoenixcontact Fl Mguard 4302 Firmware<10.4.1
Phoenixcontact Fl Mguard 4302
All of the following
Phoenixcontact Fl Mguard 4102 Pcie Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pcie
All of the following
Phoenixcontact Fl Mguard 4102 Pci Firmware<10.4.1
Phoenixcontact Fl Mguard 4102 Pci
All of the following
Phoenixcontact Fl Mguard 2105 Firmware<10.4.1
Phoenixcontact Fl Mguard 2105
All of the following
Phoenixcontact Fl Mguard 2102 Firmware<10.4.1
Phoenixcontact Fl Mguard 2102
Event History
Sep 10, 2024
CVE Published
via MITRE·08:03 AM
Data Sourced
via MITRE·08:03 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-7734?
The severity of CVE-2024-7734 is moderate, as it allows an unauthenticated remote attacker to disrupt valid IPsec VPN connections.
2
How do I fix CVE-2024-7734?
To fix CVE-2024-7734, update the affected Phoenixcontact firmware to version 8.9.3 or higher.
3
Who is affected by CVE-2024-7734?
CVE-2024-7734 affects multiple Phoenixcontact TC Mguard and FL Mguard VPN firmware versions below 8.9.3.
4
What type of attack does CVE-2024-7734 facilitate?
CVE-2024-7734 facilitates denial-of-service attacks by allowing attackers to overwhelm the pathfinder TCP encapsulation service.
5
What impact does CVE-2024-7734 have on network services?
CVE-2024-7734 can lead to the blocking of valid IPsec VPN peers, potentially disrupting secure communications.