Advisories · Technology
PHOENIX CONTACT FL MGUARD 2105.
Every CVE that names PHOENIX CONTACT FL MGUARD 2105 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
Phoenix Contact: Improper removal of sensitive information in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- CWE-212
- CVSS 8.1 High
Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
- CVSS 8.1 High
Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
- CVSS 8.1 High
Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
- CVSS 8.1 High
Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
- CVSS 8.1 High
Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
- CVSS 8.8 High
Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
- CVSS 8.8 High
Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
- CVSS 8.8 High
Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
- CVSS 8.8 High
Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
- CVSS 8.8 High
Phoenix Contact: OS command execution in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
- CVSS 5.7 Medium
Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Information disclosure
- CVSS 5.3 Medium
Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Denial of service