Skip to content
OpenAdvisories
High · 8.1 CVE-2024-43390 EUVD-2024-40263GHSA-vw69-gxfr-pfgr

Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices

Published Sep 10, 2024 · Updated Aug 22, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: FL MGUARD 2102 Product: FL MGUARD 2105 Product: FL MGUARD 4102 PCI Product: FL MGUARD 4102 PCIE Product: FL MGUARD 4302 Product: FL MGUARD 4305 Product: FL MGUARD CENTERPORT VPN-1000 Product: FL MGUARD CORE TX Product: FL MGUARD CORE TX VPN Product: FL MGUARD DELTA TX/TX Product: FL MGUARD DELTA TX/TX VPN Product: FL MGUARD GT/GT Product: FL MGUARD GT/GT VPN Product: FL MGUARD PCI4000 Product: FL MGUARD PCI4000 VPN Product: FL MGUARD PCIE4000 Product: FL MGUARD PCIE4000 VPN Product: FL MGUARD RS2000 TX/TX VPN Product: FL MGUARD RS2000 TX/TX-B Product: FL MGUARD RS2005 TX VPN Product: FL MGUARD RS4000 TX/TX Product: FL MGUARD RS4000 TX/TX VPN Product: FL MGUARD RS4000 TX/TX-M Product: FL MGUARD RS4000 TX/TX-P Product: FL MGUARD RS4004 TX/DTX Product: FL MGUARD RS4004 TX/DTX VPN Product: FL MGUARD SMART2 Product: FL MGUARD SMART2 VPN Product: TC MGUARD RS2000 3G VPN Product: TC MGUARD RS2000 4G ATT VPN Product: TC MGUARD RS2000 4G VPN Product: TC MGUARD RS2000 4G VZW VPN Product: TC MGUARD RS4000 3G VPN Product: TC MGUARD RS4000 4G ATT VPN Product: TC MGUARD RS4000 4G VPN Product: TC MGUARD RS4000 4G VZW VPN Category: ICS / OT

Description

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT FL MGUARD 2102 < 10.4.1 10.4.1
PHOENIX CONTACT FL MGUARD 2105 < 10.4.1 10.4.1
PHOENIX CONTACT FL MGUARD 4102 PCI < 10.4.1 10.4.1
PHOENIX CONTACT FL MGUARD 4102 PCIE < 10.4.1 10.4.1
PHOENIX CONTACT FL MGUARD 4302 < 10.4.1 10.4.1
PHOENIX CONTACT FL MGUARD 4305 < 10.4.1 10.4.1
PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000 < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD CORE TX < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD CORE TX VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD DELTA TX/TX < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD GT/GT < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD GT/GT VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD PCI4000 < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD PCI4000 VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD PCIE4000 < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD PCIE4000 VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS2005 TX VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS4000 TX/TX < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS4004 TX/DTX < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD SMART2 < 8.9.3 8.9.3
PHOENIX CONTACT FL MGUARD SMART2 VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS2000 3G VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS2000 4G VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS4000 3G VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS4000 4G VPN < 8.9.3 8.9.3
PHOENIX CONTACT TC MGUARD RS4000 4G VZW VPN < 8.9.3 8.9.3

Advisories 1

References