CVE-2024-43390
High
Description
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.
SeverityHigh
CVSS8.1
Exploit probability—
ProductPhoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware
PublishedSep 10, 2024
First seenSep 10, 2024
Weakness typeCWE-94Code injection
How to fix
Update
- phoenixcontact tc_mguard_rs4000_4g_vzw_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs4000_4g_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs4000_4g_att_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs4000_3g_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs2000_4g_vzw_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs2000_4g_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs2000_4g_att_vpn_firmware8.9.3 or later
- phoenixcontact tc_mguard_rs2000_3g_vpn_firmware8.9.3 or later
- phoenixcontact fl_mguard_smart2_vpn_firmware8.9.3 or later
- phoenixcontact fl_mguard_smart2_firmware8.9.3 or later
- phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmware8.9.3 or later
- phoenixcontact fl_mguard_rs4004_tx\/dtx_firmware8.9.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact tc_mguard_rs4000_4g_vzw_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs4000_4g_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs4000_4g_att_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs4000_3g_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs2000_4g_vzw_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs2000_4g_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs2000_4g_att_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact tc_mguard_rs2000_3g_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_smart2_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_smart2_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs4004_tx\/dtx_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs4000_tx\/tx_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs4000_tx\/tx-p_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs4000_tx\/tx-m_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs4000_tx\/tx_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs2005_tx_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs2000_tx\/tx_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_rs2000_tx\/tx-b_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_pcie4000_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_pcie4000_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_pci4000_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_pci4000_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_gt\/gt_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_gt\/gt_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_delta_tx\/tx_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_core_tx_vpn_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_core_tx_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_centerport_vpn-1000_firmware | v < 8.9.3 | 8.9.3 |
| phoenixcontact fl_mguard_4305_firmware | v < 10.4.1 | 10.4.1 |
| phoenixcontact fl_mguard_4302_firmware | v < 10.4.1 | 10.4.1 |
| phoenixcontact fl_mguard_4102_pcie_firmware | v < 10.4.1 | 10.4.1 |
| phoenixcontact fl_mguard_4102_pci_firmware | v < 10.4.1 | 10.4.1 |
| phoenixcontact fl_mguard_2105_firmware | v < 10.4.1 | 10.4.1 |
| phoenixcontact fl_mguard_2102_firmware | v < 10.4.1 | 10.4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.