Description
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | FL MGUARD 2102 | ≤ 10.1.1 | — |
| PHOENIX CONTACT | FL MGUARD 4102 PCI | ≤ 10.1.1 | — |
| PHOENIX CONTACT | FL MGUARD 4102 PCIE | ≤ 10.1.1 | — |
| PHOENIX CONTACT | FL MGUARD 4302 | ≤ 10.1.1 | — |
| PHOENIX CONTACT | FL MGUARD CENTERPORT | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD CENTERPORT VPN-1000 | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD CORE TX | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD CORE TX VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD DELTA TX/TX | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD DELTA TX/TX VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD GT/GT | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD GT/GT VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD PCI4000 | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD PCI4000 VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD PCIE4000 | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD PCIE4000 VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS2000 TX/TX-B | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS2000 TX/TX VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS2005 TX VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX-M | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX-P | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS4004 TX/DTX | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD RS4004 TX/DTX VPN | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD SMART2 | ≤ 8.9.0 | — |
| PHOENIX CONTACT | FL MGUARD SMART2 VPN | ≤ 8.9.0 | — |
Advisories 1
- VDE-2023-010 PHOENIX CONTACT: FL MGUARD affected by two vulnerabilities CERT@VDE · May 14, 2025