Description
An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | FL MGUARD 2102 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 2105 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4102 PCI | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4102 PCIE | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4302 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4305 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD CENTERPORT VPN-1000 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD CORE TX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD CORE TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD DELTA TX/TX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD DELTA TX/TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD GT/GT | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD GT/GT VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCI4000 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCI4000 VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCIE4000 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCIE4000 VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS2000 TX/TX-B | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS2000 TX/TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS2005 TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX-M | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX-P | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4004 TX/DTX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4004 TX/DTX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD SMART2 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD SMART2 VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 3G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 4G ATT VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 4G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 4G VZW VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 3G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 4G ATT VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 4G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 4G VZW VPN | < 8.9.3 | 8.9.3 |
Advisories 2
- WID-SEC-2024-2079 Phoenix Contact FL MGUARD: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 7, 2026
- VDE-2024-039 Phoenix Contact: Multiple Vulnerabilities in mGuard devices CERT@VDE · Aug 27, 2025