Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-43387

Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices

Description

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT FL MGUARD 2102

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 2105

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4102 PCI

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4102 PCIE

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4302

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD 4305

Default version status: unaffected

  • 0 to < 10.4.1affected

PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD CORE TX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD CORE TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD DELTA TX/TX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD GT/GT

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD GT/GT VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCI4000

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCI4000 VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCIE4000

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD PCIE4000 VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS2005 TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4004 TX/DTX

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD SMART2

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT FL MGUARD SMART2 VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 3G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 4G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 3G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 4G VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

PHOENIX CONTACT TC MGUARD RS4000 4G VZW VPN

Default version status: unaffected

  • 0 to < 8.9.3affected

References