{"id":"CVE-2022-3480","state":"PUBLISHED","title":"Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family","description":"A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.\n","publishedAt":"2022-11-15T10:58:25.780Z","updatedAt":"2025-04-29T20:13:45.498Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CERTVDE"},"assigner":"CERTVDE","products":["PHOENIX CONTACT FL MGUARD CENTERPORT","PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000","PHOENIX CONTACT FL MGUARD CORE TX","PHOENIX CONTACT FL MGUARD CORE TX VPN","PHOENIX CONTACT FL MGUARD DELTA TX/TX","PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN","PHOENIX CONTACT FL MGUARD GT/GT","PHOENIX CONTACT FL MGUARD GT/GT VPN","PHOENIX CONTACT FL MGUARD PCI4000","PHOENIX CONTACT FL MGUARD PCI4000 VPN","PHOENIX CONTACT FL MGUARD PCIE4000","PHOENIX CONTACT FL MGUARD PCIE4000 VPN","PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B","PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN","PHOENIX CONTACT FL MGUARD RS2005 TX VPN","PHOENIX CONTACT FL MGUARD RS4000 TX/TX","PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M","PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P","PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN","PHOENIX CONTACT FL MGUARD RS4004 TX/DTX","PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN","PHOENIX CONTACT FL MGUARD SMART2","PHOENIX CONTACT FL MGUARD SMART2 VPN","PHOENIX CONTACT TC MGUARD RS2000 3G VPN","PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN","PHOENIX CONTACT TC MGUARD RS2000 4G VPN","PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN","PHOENIX CONTACT TC MGUARD RS4000 3G VPN","PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN","PHOENIX CONTACT TC MGUARD RS4000 4G VPN","PHOENIX CONTACT TC MGUARD RS4000 4G VZW VPN"],"affected":[{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CENTERPORT","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CENTERPORT VPN-1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX-B","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2005 TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-M","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-P","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]}],"references":["https://cert.vde.com/en/advisories/VDE-2022-051/"],"weaknesses":["CWE-770"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3480.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3480","state":"PUBLISHED","datePublished":"2022-11-15T10:58:25.780Z","dateUpdated":"2025-04-29T20:13:45.498Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","requesterUserId":"a1e5283b-8f0d-401e-98b2-bc6219c0e8d1","dateReserved":"2022-10-13T07:49:46.094Z"},"containers":{"cna":{"title":"Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family","descriptions":[{"lang":"en","value":"A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.\n"}],"affected":[{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CENTERPORT","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CENTERPORT VPN-1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX-B","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2005 TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-M","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-P","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.0","versionType":"semver"}]}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-051/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","description":"CWE-770 Allocation of Resources Without Limits or Throttling","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateUpdated":"2022-11-15T10:58:25.780Z"},"datePublic":"2022-11-15T09:00:00.000Z","impacts":[{"capecId":"CAPEC-469","descriptions":[{"lang":"en","value":"CAPEC-469 HTTP DoS"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Upgrade to firmware version >= 8.9.0"}],"value":"Upgrade to firmware version >= 8.9.0"}],"source":{"advisory":"VDE-2022-051","defect":["CERT@VDE#64261"],"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-051/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:14:01.485Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-29T20:13:37.379872Z","id":"CVE-2022-3480","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-29T20:13:45.498Z"}}]}}}