{"document":{"acknowledgments":[{"organization":"CERT@VDE","summary":"coordination","urls":["https://certvde.com"]},{"names":["Andrea Palanca"],"organization":"Nozomi Networks Security Research Team","summary":"These vulnerabilities were discovered by the Nozomi Networks Security Research Team. We kindly appreciate the coordinated disclosure of these vulnerabilities by the finder.","urls":["https://www.nozominetworks.com/labs"]}],"aggregate_severity":{"namespace":"https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale","text":"high"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en-US","notes":[{"category":"summary","text":"Confidential data in HTTP query string of user requests.\nIncomplete sanitation of user input in administrative web interface.","title":"Summary"},{"category":"description","text":"Attackers can gain knowledge of confidential user data.\nAttackers can escalate their privileges on the system.\nAttackers can trigger covert misbehavior within several services.","title":"Impact"},{"category":"description","text":"Access to the administrative interfaces should be granted only to trustworthy users.","title":"Mitigation"},{"category":"description","text":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes these vulnerabilities.","title":"Remediation"},{"category":"general","text":"For general information and recommendations on security measures refer to the [mGuard documentation](https://help.mguard.com/en/documentation)","title":"General Recommendation"},{"category":"description","text":"mGuards are industrial routers and security appliances","title":"Product Description"}],"publisher":{"category":"vendor","contact_details":"psirt@phoenixcontact.com","name":"Phoenix Contact GmbH & Co. KG","namespace":"https://phoenixcontact.com/psirt"},"references":[{"category":"external","summary":"Phoenix Contact PSIRT","url":"https://phoenixcontact.com/psirt"},{"category":"external","summary":"Phoenix Contact advisory overview at CERT@VDE","url":"https://certvde.com/de/advisories/vendor/phoenixcontact/"},{"category":"self","summary":"VDE-2024-039: Phoenix Contact: Multiple Vulnerabilities in mGuard devices - HTML","url":"https://certvde.com/en/advisories/VDE-2024-039"},{"category":"self","summary":"VDE-2024-039: Phoenix Contact: Multiple Vulnerabilities in mGuard devices - CSAF","url":"https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-039.json"}],"title":"Phoenix Contact: Multiple Vulnerabilities in mGuard devices","tracking":{"aliases":["VDE-2024-039","PCSA-2024/00008"],"current_release_date":"2025-08-27T10:00:00.000Z","generator":{"date":"2025-08-28T07:39:37.033Z","engine":{"name":"Secvisogram","version":"2.5.34"}},"id":"VDE-2024-039","initial_release_date":"2024-09-10T10:00:00.000Z","revision_history":[{"date":"2024-09-10T10:00:00.000Z","number":"1.0.0","summary":"Initial revision."},{"date":"2024-11-06T11:27:01.000Z","number":"1.0.1","summary":"Fix: correct certvde domain, added self-reference"},{"date":"2025-04-10T13:00:00.000Z","number":"1.0.2","summary":"Fixed csaf reference URL"},{"date":"2025-08-27T10:00:00.000Z","number":"1.1.2","summary":"Update: CWE from CVE-2024-43388, CVE-2024-43389, CVE-2024-43390, CVE-2024-43391, CVE-2024-43392, CVE-2024-43393, CVE-2024-7698, Revision History"}],"status":"final","version":"1.1.2"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"FL MGUARD RS2000 TX/TX VPN","product":{"name":"FL MGUARD RS2000 TX/TX VPN","product_id":"CSAFPID-11001","product_identification_helper":{"model_numbers":["2700642"]}}},{"category":"product_name","name":"FL MGUARD RS2005 TX VPN","product":{"name":"FL MGUARD RS2005 TX VPN","product_id":"CSAFPID-11002","product_identification_helper":{"model_numbers":["2701875"]}}},{"category":"product_name","name":"TC MGUARD RS2000 3G VPN","product":{"name":"TC MGUARD RS2000 3G VPN","product_id":"CSAFPID-11003","product_identification_helper":{"model_numbers":["2903441"]}}},{"category":"product_name","name":"FL MGUARD RS4000 TX/TX","product":{"name":"FL MGUARD RS4000 TX/TX","product_id":"CSAFPID-11004","product_identification_helper":{"model_numbers":["2700634"]}}},{"category":"product_name","name":"FL MGUARD RS4000 TX/TX VPN","product":{"name":"FL MGUARD RS4000 TX/TX VPN","product_id":"CSAFPID-11005","product_identification_helper":{"model_numbers":["2200515"]}}},{"category":"product_name","name":"FL MGUARD RS4004 TX/DTX","product":{"name":"FL MGUARD RS4004 TX/DTX","product_id":"CSAFPID-11006","product_identification_helper":{"model_numbers":["2701876"]}}},{"category":"product_name","name":"FL MGUARD RS4004 TX/DTX VPN","product":{"name":"FL MGUARD RS4004 TX/DTX VPN","product_id":"CSAFPID-11007","product_identification_helper":{"model_numbers":["2701877"]}}},{"category":"product_name","name":"TC MGUARD RS4000 3G VPN","product":{"name":"TC MGUARD RS4000 3G VPN","product_id":"CSAFPID-11008","product_identification_helper":{"model_numbers":["2903440"]}}},{"category":"product_name","name":"FL MGUARD RS2000 TX/TX-B","product":{"name":"FL MGUARD RS2000 TX/TX-B","product_id":"CSAFPID-11009","product_identification_helper":{"model_numbers":["2702139"]}}},{"category":"product_name","name":"FL MGUARD RS4000 TX/TX-P","product":{"name":"FL MGUARD RS4000 TX/TX-P","product_id":"CSAFPID-11010","product_identification_helper":{"model_numbers":["2702259"]}}},{"category":"product_name","name":"FL MGUARD RS4000 TX/TX-M","product":{"name":"FL MGUARD RS4000 TX/TX-M","product_id":"CSAFPID-11011","product_identification_helper":{"model_numbers":["2702470"]}}},{"category":"product_name","name":"FL MGUARD PCI4000","product":{"name":"FL MGUARD PCI4000","product_id":"CSAFPID-11012","product_identification_helper":{"model_numbers":["2701274"]}}},{"category":"product_name","name":"FL MGUARD PCI4000 VPN","product":{"name":"FL MGUARD PCI4000 VPN","product_id":"CSAFPID-11013","product_identification_helper":{"model_numbers":["2701275"]}}},{"category":"product_name","name":"FL MGUARD PCIE4000","product":{"name":"FL MGUARD PCIE4000","product_id":"CSAFPID-11014","product_identification_helper":{"model_numbers":["2701277"]}}},{"category":"product_name","name":"FL MGUARD PCIE4000 VPN","product":{"name":"FL MGUARD PCIE4000 VPN","product_id":"CSAFPID-11015","product_identification_helper":{"model_numbers":["2701278"]}}},{"category":"product_name","name":"FL MGUARD DELTA TX/TX","product":{"name":"FL MGUARD DELTA TX/TX","product_id":"CSAFPID-11016","product_identification_helper":{"model_numbers":["2700967"]}}},{"category":"product_name","name":"FL MGUARD DELTA TX/TX VPN","product":{"name":"FL MGUARD DELTA TX/TX VPN","product_id":"CSAFPID-11017","product_identification_helper":{"model_numbers":["2700968"]}}},{"category":"product_name","name":"FL MGUARD SMART2","product":{"name":"FL MGUARD SMART2","product_id":"CSAFPID-11018","product_identification_helper":{"model_numbers":["2700640"]}}},{"category":"product_name","name":"FL MGUARD SMART2 VPN","product":{"name":"FL MGUARD SMART2 VPN","product_id":"CSAFPID-11019","product_identification_helper":{"model_numbers":["2700639"]}}},{"category":"product_name","name":"FL MGUARD CORE TX","product":{"name":"FL MGUARD CORE TX","product_id":"CSAFPID-11020","product_identification_helper":{"model_numbers":["2702884"]}}},{"category":"product_name","name":"FL MGUARD CORE TX VPN","product":{"name":"FL MGUARD CORE TX VPN","product_id":"CSAFPID-11021","product_identification_helper":{"model_numbers":["2702831"]}}},{"category":"product_name","name":"TC MGUARD RS2000 4G VPN","product":{"name":"TC MGUARD RS2000 4G VPN","product_id":"CSAFPID-11022","product_identification_helper":{"model_numbers":["2903588"]}}},{"category":"product_name","name":"TC MGUARD RS4000 4G VPN","product":{"name":"TC MGUARD RS4000 4G VPN","product_id":"CSAFPID-11023","product_identification_helper":{"model_numbers":["2903586"]}}},{"category":"product_name","name":"TC MGUARD RS4000 4G VZW VPN","product":{"name":"TC MGUARD RS4000 4G VZW VPN","product_id":"CSAFPID-11024","product_identification_helper":{"model_numbers":["1010461"]}}},{"category":"product_name","name":"TC MGUARD RS2000 4G VZW VPN","product":{"name":"TC MGUARD RS2000 4G VZW VPN","product_id":"CSAFPID-11025","product_identification_helper":{"model_numbers":["1010462"]}}},{"category":"product_name","name":"TC MGUARD RS4000 4G ATT VPN","product":{"name":"TC MGUARD RS4000 4G ATT VPN","product_id":"CSAFPID-11026","product_identification_helper":{"model_numbers":["1010463"]}}},{"category":"product_name","name":"TC MGUARD RS2000 4G ATT VPN","product":{"name":"TC MGUARD RS2000 4G ATT VPN","product_id":"CSAFPID-11027","product_identification_helper":{"model_numbers":["1010464"]}}},{"category":"product_name","name":"FL MGUARD GT/GT","product":{"name":"FL MGUARD GT/GT","product_id":"CSAFPID-11028","product_identification_helper":{"model_numbers":["2700197"]}}},{"category":"product_name","name":"FL MGUARD GT/GT VPN","product":{"name":"FL MGUARD GT/GT VPN","product_id":"CSAFPID-11029","product_identification_helper":{"model_numbers":["2700198"]}}},{"category":"product_name","name":"FL MGUARD CENTERPORT","product":{"name":"FL MGUARD CENTERPORT","product_id":"CSAFPID-11030","product_identification_helper":{"model_numbers":["2702547"]}}},{"category":"product_name","name":"FL MGUARD CENTERPORT VPN-1000","product":{"name":"FL MGUARD CENTERPORT VPN-1000","product_id":"CSAFPID-11031","product_identification_helper":{"model_numbers":["2702820"]}}},{"category":"product_name","name":"FL MGUARD 2102","product":{"name":"FL MGUARD 2102","product_id":"CSAFPID-11032","product_identification_helper":{"model_numbers":["1357828"]}}},{"category":"product_name","name":"FL MGUARD 2105","product":{"name":"FL MGUARD 2105","product_id":"CSAFPID-11033","product_identification_helper":{"model_numbers":["1357850"]}}},{"category":"product_name","name":"FL MGUARD 4302","product":{"name":"FL MGUARD 4302","product_id":"CSAFPID-11034","product_identification_helper":{"model_numbers":["1357840"]}}},{"category":"product_name","name":"FL MGUARD 4305","product":{"name":"FL MGUARD 4305","product_id":"CSAFPID-11035","product_identification_helper":{"model_numbers":["1357875"]}}},{"category":"product_name","name":"FL MGUARD 4102 PCIE","product":{"name":"FL MGUARD 4102 PCIE","product_id":"CSAFPID-11036","product_identification_helper":{"model_numbers":["1357842"]}}},{"category":"product_name","name":"FL MGUARD 4102 PCI","product":{"name":"FL MGUARD 4102 PCI","product_id":"CSAFPID-11037","product_identification_helper":{"model_numbers":["1441187"]}}}],"category":"product_family","name":"Hardware"},{"branches":[{"category":"product_version_range","name":"<8.9.3","product":{"name":"Firmware <8.9.3","product_id":"CSAFPID-21892"}},{"category":"product_version","name":"8.9.3","product":{"name":"Firmware 8.9.3","product_id":"CSAFPID-22893"}},{"category":"product_version_range","name":"<10.4.1","product":{"name":"Firmware <10.4.1","product_id":"CSAFPID-21040"}},{"category":"product_version","name":"10.4.1","product":{"name":"Firmware 10.4.1","product_id":"CSAFPID-22041"}}],"category":"product_family","name":"Firmware"}],"category":"vendor","name":"Phoenix Contact"}],"product_groups":[{"group_id":"CSAFGID-0001","product_ids":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"],"summary":"Affected Products."},{"group_id":"CSAFGID-0002","product_ids":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"summary":"Fixed Products."}],"relationships":[{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS2000 TX/TX VPN","product_id":"CSAFPID-31001"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11001"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS2005 TX VPN","product_id":"CSAFPID-31002"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11002"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS2000 3G VPN","product_id":"CSAFPID-31003"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS4000 TX/TX","product_id":"CSAFPID-31004"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS4000 TX/TX VPN","product_id":"CSAFPID-31005"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11005"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS4004 TX/DTX","product_id":"CSAFPID-31006"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11006"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS4004 TX/DTX VPN","product_id":"CSAFPID-31007"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11007"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS4000 3G VPN","product_id":"CSAFPID-31008"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11008"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS2000 TX/TX-B","product_id":"CSAFPID-31009"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11009"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS4000 TX/TX-P","product_id":"CSAFPID-31010"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11010"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD RS4000 TX/TX-M","product_id":"CSAFPID-31011"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11011"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD PCI4000","product_id":"CSAFPID-31012"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11012"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD PCI4000 VPN","product_id":"CSAFPID-31013"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11013"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD PCIE4000","product_id":"CSAFPID-31014"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11014"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD PCIE4000 VPN","product_id":"CSAFPID-31015"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11015"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD DELTA TX/TX","product_id":"CSAFPID-31016"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11016"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD DELTA TX/TX VPN","product_id":"CSAFPID-31017"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11017"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD SMART2","product_id":"CSAFPID-31018"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11018"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD SMART2 VPN","product_id":"CSAFPID-31019"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11019"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD CORE TX","product_id":"CSAFPID-31020"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11020"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD CORE TX VPN","product_id":"CSAFPID-31021"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11021"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS2000 4G VPN","product_id":"CSAFPID-31022"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11022"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS4000 4G VPN","product_id":"CSAFPID-31023"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11023"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS4000 4G VZW VPN","product_id":"CSAFPID-31024"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11024"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS2000 4G VZW VPN","product_id":"CSAFPID-31025"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11025"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS4000 4G ATT VPN","product_id":"CSAFPID-31026"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11026"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on TC MGUARD RS2000 4G ATT VPN","product_id":"CSAFPID-31027"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11027"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD GT/GT","product_id":"CSAFPID-31028"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11028"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD GT/GT VPN","product_id":"CSAFPID-31029"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11029"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD CENTERPORT","product_id":"CSAFPID-31030"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11030"},{"category":"installed_on","full_product_name":{"name":"Firmware <8.9.3 installed on FL MGUARD CENTERPORT VPN-1000","product_id":"CSAFPID-31031"},"product_reference":"CSAFPID-21892","relates_to_product_reference":"CSAFPID-11031"},{"category":"installed_on","full_product_name":{"name":"Firmware <10.4.1 installed on FL MGUARD 2102","product_id":"CSAFPID-31032"},"product_reference":"CSAFPID-21040","relates_to_product_reference":"CSAFPID-11032"},{"category":"installed_on","full_product_name":{"name":"Firmware <10.4.1 installed on FL MGUARD 2105","product_id":"CSAFPID-31033"},"product_reference":"CSAFPID-21040","relates_to_product_reference":"CSAFPID-11033"},{"category":"installed_on","full_product_name":{"name":"Firmware <10.4.1 installed on FL MGUARD 4302","product_id":"CSAFPID-31034"},"product_reference":"CSAFPID-21040","relates_to_product_reference":"CSAFPID-11034"},{"category":"installed_on","full_product_name":{"name":"Firmware <10.4.1 installed on FL MGUARD 4305","product_id":"CSAFPID-31035"},"product_reference":"CSAFPID-21040","relates_to_product_reference":"CSAFPID-11035"},{"category":"installed_on","full_product_name":{"name":"Firmware <10.4.1 installed on FL MGUARD 4102 PCIE","product_id":"CSAFPID-31036"},"product_reference":"CSAFPID-21040","relates_to_product_reference":"CSAFPID-11036"},{"category":"installed_on","full_product_name":{"name":"Firmware <10.4.1 installed on FL MGUARD 4102 PCI","product_id":"CSAFPID-31037"},"product_reference":"CSAFPID-21040","relates_to_product_reference":"CSAFPID-11037"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS2000 TX/TX VPN","product_id":"CSAFPID-32001"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11001"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS2005 TX VPN","product_id":"CSAFPID-32002"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11002"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS2000 3G VPN","product_id":"CSAFPID-32003"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS4000 TX/TX","product_id":"CSAFPID-32004"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS4000 TX/TX VPN","product_id":"CSAFPID-32005"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11005"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS4004 TX/DTX","product_id":"CSAFPID-32006"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11006"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS4004 TX/DTX VPN","product_id":"CSAFPID-32007"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11007"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS4000 3G VPN","product_id":"CSAFPID-32008"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11008"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS2000 TX/TX-B","product_id":"CSAFPID-32009"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11009"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS4000 TX/TX-P","product_id":"CSAFPID-32010"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11010"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD RS4000 TX/TX-M","product_id":"CSAFPID-32011"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11011"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD PCI4000","product_id":"CSAFPID-32012"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11012"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD PCI4000 VPN","product_id":"CSAFPID-32013"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11013"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD PCIE4000","product_id":"CSAFPID-32014"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11014"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD PCIE4000 VPN","product_id":"CSAFPID-32015"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11015"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD DELTA TX/TX","product_id":"CSAFPID-32016"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11016"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD DELTA TX/TX VPN","product_id":"CSAFPID-32017"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11017"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD SMART2","product_id":"CSAFPID-32018"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11018"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD SMART2 VPN","product_id":"CSAFPID-32019"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11019"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD CORE TX","product_id":"CSAFPID-32020"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11020"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD CORE TX VPN","product_id":"CSAFPID-32021"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11021"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS2000 4G VPN","product_id":"CSAFPID-32022"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11022"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS4000 4G VPN","product_id":"CSAFPID-32023"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11023"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS4000 4G VZW VPN","product_id":"CSAFPID-32024"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11024"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS2000 4G VZW VPN","product_id":"CSAFPID-32025"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11025"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS4000 4G ATT VPN","product_id":"CSAFPID-32026"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11026"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on TC MGUARD RS2000 4G ATT VPN","product_id":"CSAFPID-32027"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11027"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD GT/GT","product_id":"CSAFPID-32028"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11028"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD GT/GT VPN","product_id":"CSAFPID-32029"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11029"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD CENTERPORT","product_id":"CSAFPID-32030"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11030"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.9.3 installed on FL MGUARD CENTERPORT VPN-1000","product_id":"CSAFPID-32031"},"product_reference":"CSAFPID-22893","relates_to_product_reference":"CSAFPID-11031"},{"category":"installed_on","full_product_name":{"name":"Firmware 10.4.1 installed on FL MGUARD 2102","product_id":"CSAFPID-32032"},"product_reference":"CSAFPID-22041","relates_to_product_reference":"CSAFPID-11032"},{"category":"installed_on","full_product_name":{"name":"Firmware 10.4.1 installed on FL MGUARD 2105","product_id":"CSAFPID-32033"},"product_reference":"CSAFPID-22041","relates_to_product_reference":"CSAFPID-11033"},{"category":"installed_on","full_product_name":{"name":"Firmware 10.4.1 installed on FL MGUARD 4302","product_id":"CSAFPID-32034"},"product_reference":"CSAFPID-22041","relates_to_product_reference":"CSAFPID-11034"},{"category":"installed_on","full_product_name":{"name":"Firmware 10.4.1 installed on FL MGUARD 4305","product_id":"CSAFPID-32035"},"product_reference":"CSAFPID-22041","relates_to_product_reference":"CSAFPID-11035"},{"category":"installed_on","full_product_name":{"name":"Firmware 10.4.1 installed on FL MGUARD 4102 PCIE","product_id":"CSAFPID-32036"},"product_reference":"CSAFPID-22041","relates_to_product_reference":"CSAFPID-11036"},{"category":"installed_on","full_product_name":{"name":"Firmware 10.4.1 installed on FL MGUARD 4102 PCI","product_id":"CSAFPID-32037"},"product_reference":"CSAFPID-22041","relates_to_product_reference":"CSAFPID-11037"}]},"vulnerabilities":[{"cve":"CVE-2024-7698","cwe":{"id":"CWE-201","name":"Insertion of Sensitive Information Into Sent Data"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF\nattacks.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"User with low privileges (read access to logs) may get access to anti CSRF tokens of higher privileged users. These tokens can be abused to mount CSRF attacks.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Read access to the device via administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","environmentalScore":5.7,"environmentalSeverity":"MEDIUM","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":5.7,"temporalSeverity":"MEDIUM","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-7698"},{"cve":"CVE-2024-7699","cwe":{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"},"notes":[{"audience":"all","category":"description","text":"An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special\nelements in user data.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to use the action endpoint may trigger misbehavior in connected functionality.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8.8,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":8.8,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-7699"},{"cve":"CVE-2024-43384","cwe":{"id":"CWE-212","name":"Improper Removal of Sensitive Information Before Storage or Transfer"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or\ntransfer.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"User with low privileges (read access to logs) may gain knowledge about foreign passwords. They can be misused for privilege escalation or to get unauthorized access to target systems.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Read access to the device via administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":8,"temporalSeverity":"HIGH","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43384"},{"cve":"CVE-2024-43385","cwe":{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of\nspecial elements in the variable PROXY_HTTP_PORT in mGuard devices","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger the execution of arbitrary OS commands. As these commands are executed with root privileges, this can lead to a privilege escalation.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8.8,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":8.8,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43385"},{"cve":"CVE-2024-43386","cwe":{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of\nspecial elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger the execution of arbitrary OS commands. As these commands are executed with root privileges, this can lead to a privilege escalation.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8.8,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":8.8,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43386"},{"cve":"CVE-2024-43387","cwe":{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the\nvariable EMAIL_RELAY_PASSWORD in mGuard devices.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger misbehavior of a connected curl process. As this process runs with root privileges, this can lead to a privilege escalation.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8.8,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":8.8,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43387"},{"cve":"CVE-2024-43388","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger covert misbehavior of a connected net-snmp agent.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8.8,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":8.8,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43388"},{"cve":"CVE-2024-43389","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can perform configuration changes of the ospf service through\nOSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger covert misbehavior of a connected ospfd service.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","environmentalScore":6.5,"environmentalSeverity":"MEDIUM","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":6.5,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43389"},{"cve":"CVE-2024-43390","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT\nthrough the FW_NAT.IN_IP environment variable which can lead to a DoS.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger covert misbehavior within several firewall services, including packet forwarding or NAT.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","environmentalScore":6.5,"environmentalSeverity":"MEDIUM","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":6.5,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43390"},{"cve":"CVE-2024-43391","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet\nforwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead\nto a DoS.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger covert misbehavior within all firewall services, including packet filter, packet forwarding, network access control or NAT.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","environmentalScore":6.5,"environmentalSeverity":"MEDIUM","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":6.5,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43391"},{"cve":"CVE-2024-43392","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet\nforwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP\nFW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger covert misbehavior within all firewall services, including packet filter, packet forwarding, network access control or NAT.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","environmentalScore":6.5,"environmentalSeverity":"MEDIUM","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":6.5,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031"]}],"title":"CVE-2024-43392"},{"cve":"CVE-2024-43393","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"audience":"all","category":"description","text":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet\nforwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP\nFW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable\nwhich can lead to a DoS.","title":"Vulnerability Description"},{"audience":"operational management and system administrators","category":"details","text":"Users with privileges to perform configuration changes can trigger covert misbehavior within all firewall services, including packet filter, packet forwarding, network access control or NAT.","title":"Vulnerability Impact"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]},"remediations":[{"category":"mitigation","details":"Access to the administrative interfaces should be granted only to trustworthy users.","group_ids":["CSAFGID-0001"]},{"category":"vendor_fix","details":"Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","environmentalScore":6.5,"environmentalSeverity":"MEDIUM","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","temporalScore":6.5,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037"]}],"title":"CVE-2024-43393"}]}