CVE-2023-2673
Medium
Description
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
SeverityMedium
CVSS5.3
Exploit probability—
ProductPhoenixcontact Fl Mguard 2102 Firmware
PublishedJun 13, 2023
First seenJun 13, 2023
Weakness typeCWE-1287CWE-1287
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact fl_mguard_2102_firmware | v ≤ 10.1.1 | — |
| phoenixcontact fl_mguard_4102_pci_firmware | v ≤ 10.1.1 | — |
| phoenixcontact fl_mguard_4102_pcie_firmware | v ≤ 10.1.1 | — |
| phoenixcontact fl_mguard_4302_firmware | v ≤ 10.1.1 | — |
| phoenixcontact fl_mguard_centerport_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_centerport_vpn-1000_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_core_tx_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_core_tx_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_delta_tx\/tx_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_gt\/gt_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_gt\/gt_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_pci4000_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_pci4000_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_pcie4000_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_pcie4000_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs2000_tx\/tx-b_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs2000_tx\/tx_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs2005_tx_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs4000_tx\/tx-m_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs4000_tx\/tx-p_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs4000_tx\/tx_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs4004_tx\/dtx_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_smart2_firmware | v ≤ 8.9.0 | — |
| phoenixcontact fl_mguard_smart2_vpn_firmware | v ≤ 8.9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.