Advisories · Technology

PHOENIX CONTACT FL MGUARD CORE TX VPN.

Every CVE that names PHOENIX CONTACT FL MGUARD CORE TX VPN among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43384 CVE record

CVSS 8.0 High

Phoenix Contact: Improper removal of sensitive information in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- CWE-212
Not analysed yet 7 May 2026
CVE-2024-43393 CVE record

CVSS 8.1 High

Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43392 CVE record

CVSS 8.1 High

Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43391 CVE record

CVSS 8.1 High

Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43390 CVE record

CVSS 8.1 High

Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43389 CVE record

CVSS 8.1 High

Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43388 CVE record

CVSS 8.8 High

Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43387 CVE record

CVSS 8.8 High

Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-43386 CVE record

CVSS 8.8 High

Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-43385 CVE record

CVSS 8.8 High

Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-7699 CVE record

CVSS 8.8 High

Phoenix Contact: OS command execution in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-7698 CVE record

CVSS 5.7 Medium

Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Information disclosure
Not analysed yet 10 Sept 2024
CVE-2024-7734 CVE record

CVSS 5.3 Medium

Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Denial of service
Not analysed yet 10 Sept 2024
CVE-2023-2673 CVE record

CVSS 5.3 Medium

PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 4102 PCI
- CWE-1287
Not analysed yet 13 Jun 2023
CVE-2022-3480 CVE record

CVSS 7.5 High

Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
- PHOENIX CONTACT FL MGUARD CENTERPORT
- PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000
- Denial of service
Not analysed yet 15 Nov 2022