Summary
A denial of service of the HTTPS management interface of PHOENIX CONTACT FL MGUARD and TC MGUARD devices can be triggered by a larger number of unauthenticated HTTPS connections originating from different source IP's. Configuring firewall limits for incoming connections cannot prevent the issue.
Details
Mitigation
Don't allow access to the HTTPS management interface from untrusted networks.In the default configuration, the access is only allowed from internal interfaces.
Remediation
The vulnerability is fixed in firmware version 8.9.0. We strongly recommend all affected users to upgrade to this or a later version.
Vulnerabilities 1
-
High 7.5
Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firew…
Revision history
-
#2
Fix: added distribution, quotation mark
-
#1
Initial revision.
References
-
PHOENIX CONTACT PSIRT
https://phoenixcontact.com/psirt
-
CERT@VDE Security Advisories for PHOENIX CONTACT
https://certvde.com/en/advisories/vendor/phoenixcontact/
-
VDE-2022-051: PHOENIX CONTACT: Denial-of-Service vulnerability in mGuard product family - HTML
https://certvde.com/en/advisories/VDE-2022-051/