CVE-2022-3480 Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.

Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: PHOENIX CONTACT
product: FL MGUARD CENTERPORT
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD CENTERPORT VPN-1000
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD CORE TX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD CORE TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD DELTA TX/TX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD DELTA TX/TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD GT/GT
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD GT/GT VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCI4000
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCI4000 VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCIE4000
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCIE4000 VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS2000 TX/TX-B
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS2000 TX/TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS2005 TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX-M
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX-P
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4004 TX/DTX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4004 TX/DTX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD SMART2
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD SMART2 VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 3G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 4G ATT VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 4G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 4G VZW VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 3G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 4G ATT VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 4G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 4G VZW VPN
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-11-15T10:58:25.780Z