Description
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | FL MGUARD 2102 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 2105 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4102 PCI | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4102 PCIE | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4302 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD 4305 | < 10.4.1 | 10.4.1 |
| PHOENIX CONTACT | FL MGUARD CENTERPORT VPN-1000 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD CORE TX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD CORE TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD DELTA TX/TX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD DELTA TX/TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD GT/GT | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD GT/GT VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCI4000 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCI4000 VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCIE4000 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD PCIE4000 VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS2000 TX/TX-B | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS2000 TX/TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS2005 TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX-M | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX-P | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4000 TX/TX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4004 TX/DTX | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD RS4004 TX/DTX VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD SMART2 | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | FL MGUARD SMART2 VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 3G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 4G ATT VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 4G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS2000 4G VZW VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 3G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 4G ATT VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 4G VPN | < 8.9.3 | 8.9.3 |
| PHOENIX CONTACT | TC MGUARD RS4000 4G VZW VPN | < 8.9.3 | 8.9.3 |
Advisories 2
- WID-SEC-2024-2079 Phoenix Contact FL MGUARD: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 7, 2026
- VDE-2024-052 Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors. CERT@VDE · May 14, 2025