Summary
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
Details
Impact
Attackers can inject code in the SSH server, which is run with high privileges.
Mitigation
Access to the SSH server should be limited to trustworthy networks or peers.
Remote access to the SSH server should be disabled.
Remediation
Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.
Product Description
mGuards are industrial routers and security appliances
Vulnerabilities 1
-
High 8.1
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate…
Revision history
-
#4
Fix: added distribution
-
#3
Fixed CSAF reference URL
-
#2
Fix: correct certvde domain, added self-reference
-
#1
Initial revision.
References
-
PCSA-2024/00009: mGuard firmware <8.9.3 / 10.4.1 is vulnerable to an RCE in openSSH (regreSSHion)
https://phoenixcontact.com/psirt
-
Phoenix Contact PSIRT
https://phoenixcontact.com/psirt
-
Phoenix Contact advisory overview at CERT@VDE
https://certvde.com/de/advisories/vendor/phoenixcontact/
-
VDE-2024-051: Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH - HTML
https://certvde.com/en/advisories/VDE-2024-051