Advisories · Technology

PHOENIX CONTACT FL MGUARD GT/GT.

Every CVE that names PHOENIX CONTACT FL MGUARD GT/GT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43384 CVE record

CVSS 8.0 High

Phoenix Contact: Improper removal of sensitive information in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- CWE-212
Not analysed yet 7 May 2026
CVE-2024-43393 CVE record

CVSS 8.1 High

Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43392 CVE record

CVSS 8.1 High

Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43391 CVE record

CVSS 8.1 High

Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43390 CVE record

CVSS 8.1 High

Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43389 CVE record

CVSS 8.1 High

Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43388 CVE record

CVSS 8.8 High

Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Code injection
Not analysed yet 10 Sept 2024
CVE-2024-43387 CVE record

CVSS 8.8 High

Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-43386 CVE record

CVSS 8.8 High

Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-43385 CVE record

CVSS 8.8 High

Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-7699 CVE record

CVSS 8.8 High

Phoenix Contact: OS command execution in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Command injection
Not analysed yet 10 Sept 2024
CVE-2024-7698 CVE record

CVSS 5.7 Medium

Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Information disclosure
Not analysed yet 10 Sept 2024
CVE-2024-7734 CVE record

CVSS 5.3 Medium

Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- Denial of service
Not analysed yet 10 Sept 2024
CVE-2023-2673 CVE record

CVSS 5.3 Medium

PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 4102 PCI
- CWE-1287
Not analysed yet 13 Jun 2023
CVE-2022-3480 CVE record

CVSS 7.5 High

Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
- PHOENIX CONTACT FL MGUARD CENTERPORT
- PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000
- Denial of service
Not analysed yet 15 Nov 2022