Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-43386

Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.

Description

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT FL MGUARD 2102

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 2105

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4102 PCI

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4102 PCIE

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4302

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4305

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD CORE TX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD CORE TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD DELTA TX/TX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD GT/GT

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD GT/GT VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCI4000

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCI4000 VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCIE4000

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCIE4000 VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS2005 TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4004 TX/DTX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD SMART2

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD SMART2 VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 3G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 4G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 3G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 4G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 4G VZW VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

References