{"id":"CVE-2024-43390","state":"PUBLISHED","title":"Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices","description":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.","publishedAt":"2024-09-10T08:44:30.792Z","updatedAt":"2025-08-22T06:23:31.974Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","source":"CERTVDE"},"assigner":"CERTVDE","products":["PHOENIX CONTACT FL MGUARD 2102","PHOENIX CONTACT FL MGUARD 2105","PHOENIX CONTACT FL MGUARD 4102 PCI","PHOENIX CONTACT FL MGUARD 4102 PCIE","PHOENIX CONTACT FL MGUARD 4302","PHOENIX CONTACT FL MGUARD 4305","PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000","PHOENIX CONTACT FL MGUARD CORE TX","PHOENIX CONTACT FL MGUARD CORE TX VPN","PHOENIX CONTACT FL MGUARD DELTA TX/TX","PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN","PHOENIX CONTACT FL MGUARD GT/GT","PHOENIX CONTACT FL MGUARD GT/GT VPN","PHOENIX CONTACT FL MGUARD PCI4000","PHOENIX CONTACT FL MGUARD PCI4000 VPN","PHOENIX CONTACT FL MGUARD PCIE4000","PHOENIX CONTACT FL MGUARD PCIE4000 VPN","PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B","PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN","PHOENIX CONTACT FL MGUARD RS2005 TX VPN","PHOENIX CONTACT FL MGUARD RS4000 TX/TX","PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M","PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P","PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN","PHOENIX CONTACT FL MGUARD RS4004 TX/DTX","PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN","PHOENIX CONTACT FL MGUARD SMART2","PHOENIX CONTACT FL MGUARD SMART2 VPN","PHOENIX CONTACT TC MGUARD RS2000 3G VPN","PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN","PHOENIX CONTACT TC MGUARD RS2000 4G VPN","PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN","PHOENIX CONTACT TC MGUARD RS4000 3G VPN","PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN","PHOENIX CONTACT TC MGUARD RS4000 4G VPN","PHOENIX CONTACT TC MGUARD RS4000 4G VZW VPN"],"affected":[{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 2102","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 2105","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4102 PCI","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4102 PCIE","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4302","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4305","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CENTERPORT VPN-1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX-B","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2005 TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-M","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-P","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]}],"references":["https://cert.vde.com/en/advisories/VDE-2024-039"],"weaknesses":["CWE-94"],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/43xxx/CVE-2024-43390.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-43390","state":"PUBLISHED","datePublished":"2024-09-10T08:44:30.792Z","dateUpdated":"2025-08-22T06:23:31.974Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateReserved":"2024-08-12T08:30:16.360Z"},"containers":{"cna":{"title":"Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices","descriptions":[{"lang":"en","value":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS."}],"affected":[{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 2102","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 2105","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4102 PCI","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4102 PCIE","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4302","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD 4305","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"10.4.1","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CENTERPORT VPN-1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD CORE TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD DELTA TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD GT/GT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCI4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD PCIE4000 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX-B","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS2005 TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-M","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX-P","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4000 TX/TX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD RS4004 TX/DTX VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"FL MGUARD SMART2 VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS2000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 3G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G ATT VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]},{"vendor":"PHOENIX CONTACT","product":"TC MGUARD RS4000 4G VZW VPN","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.9.3","versionType":"semver"}]}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2024-039"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-94","description":"CWE-94 Improper Control of Generation of Code ('Code Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateUpdated":"2025-08-22T06:23:31.974Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Andrea Palanca"},{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Nozomi Networks Security Research Team"}],"source":{"advisory":"VDE-2024-039","defect":["CERT@VDE#641656"],"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-10T13:43:23.510390Z","id":"CVE-2024-43390","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-10T13:44:10.735Z"}}]}}}