CVE-2018-5441

Published: Jan 30, 2018Modified: Jun 17, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.

Affected (23)

Phoenixcontact

23 products

Mguard Centerport Firmware

Mguard Delta Tx/tx Firmware

Mguard Delta Tx/tx Vpn Firmware

Mguard Gt/gt Firmware

Mguard Gt/gt Vpn Firmware

Mguard Pci4000 Vpn Firmware

Mguard Pcie4000 Vpn Firmware

Mguard Rs2000 Tx/tx Vpn Firmware

Mguard Rs2000 Tx/tx B Firmware

Mguard Rs2005 Tx Vpn Firmware

Mguard Rs4000 Tx/tx Firmware

Mguard Rs4000 Tx/tx Vpn Firmware

Mguard Rs4000 Tx/tx Vpn M Firmware

Mguard Rs4000 Tx/tx P Firmware

Mguard Rs4004 Tx/dtx Firmware

Mguard Rs4004 Tx/dtx Vpn Firmware

Mguard Smart2 Firmware

Mguard Smart2 Vpn Firmware

Mguard Rs2000 3g Vpn Firmware

Mguard Rs4000 3g Vpn Firmware

Mguard Core Tx Vpn Firmware

Mguard Rs2000 4g Vpn Firmware

Mguard Rs4000 4g Vpn Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Centerport Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Centerport	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Delta Tx/tx Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Delta Tx/tx	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Delta Tx/tx Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Delta Tx/tx Vpn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Gt/gt Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Gt/gt	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Gt/gt Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Gt/gt Vpn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Pci4000 Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Pci4000 Vpn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Pcie4000 Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Pcie4000 Vpn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs2000 Tx/tx Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs2000 Tx/tx Vpn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs2000 Tx/tx B Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs2000 Tx/tx B	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs2005 Tx Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs2005 Tx Vpn	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4000 Tx/tx Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4000 Tx/tx	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4000 Tx/tx Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4000 Tx/tx Vpn	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4000 Tx/tx Vpn M Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4000 Tx/tx Vpn M	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4000 Tx/tx P Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4000 Tx/tx P	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4004 Tx/dtx Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4004 Tx/dtx	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4004 Tx/dtx Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4004 Tx/dtx Vpn	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Smart2 Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Smart2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Smart2 Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Smart2 Vpn	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs2000 3g Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs2000 3g Vpn	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4000 3g Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4000 3g Vpn	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Core Tx Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Core Tx Vpn	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs2000 4g Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs2000 4g Vpn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Mguard Rs4000 4g Vpn Firmware	From 7.2.0 to 8.6.0

Running on/with	Platform Versions
Phoenixcontact Mguard Rs4000 4g Vpn	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-354

Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (6)

http://www.securityfocus.com/bid/102907

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://cert.vde.com/en-us/advisories/vde-2018-001

Source: ics-cert@hq.dhs.gov

PatchThird Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/102907

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://cert.vde.com/en-us/advisories/vde-2018-001

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.