CVE-2024-43391 Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.
Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: PHOENIX CONTACT
product: FL MGUARD 2102
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD 2105
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD 4102 PCI
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD 4102 PCIE
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD 4302
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD 4305
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD CENTERPORT VPN-1000
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD CORE TX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD CORE TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD DELTA TX/TX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD DELTA TX/TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD GT/GT
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD GT/GT VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCI4000
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCI4000 VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCIE4000
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD PCIE4000 VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS2000 TX/TX-B
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS2000 TX/TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS2005 TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX-M
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX-P
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4000 TX/TX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4004 TX/DTX
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD RS4004 TX/DTX VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD SMART2
default_status: unaffected
vendor: PHOENIX CONTACT
product: FL MGUARD SMART2 VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 3G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 4G ATT VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 4G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS2000 4G VZW VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 3G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 4G ATT VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 4G VPN
default_status: unaffected
vendor: PHOENIX CONTACT
product: TC MGUARD RS4000 4G VZW VPN
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Credits: lang: en
value: Andrea Palanca
lang: en
value: Nozomi Networks Security Research Team
Published: 2024-09-10T08:44:42.576Z