CVE-2020-12523

Published: Dec 17, 2020Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource

Affected (9)

Products: Phoenixcontact: Tc Mguard Rs4000 4g Vzw Vpn Firmware, Tc Mguard Rs4000 4g Att Vpn Firmware, Fl Mguard Rs4004 Tx/dtx Firmware, Fl Mguard Rs4004 Tx/dtx Vpn Firmware, Tc Mguard Rs4000 3g Vpn Firmware, Tc Mguard Rs4000 4g Vpn Firmware, Innominate Mguard Rs4000 4tx/tx Firmware, Innominate Mguard Rs4000 4tx/tx Vpn Firmware, Innominate Mguard Rs4000 4tx/3g/tx Vpn Firmware

Phoenixcontact

9 products

Tc Mguard Rs4000 4g Vzw Vpn Firmware

Tc Mguard Rs4000 4g Att Vpn Firmware

Fl Mguard Rs4004 Tx/dtx Firmware

Fl Mguard Rs4004 Tx/dtx Vpn Firmware

Tc Mguard Rs4000 3g Vpn Firmware

Tc Mguard Rs4000 4g Vpn Firmware

Innominate Mguard Rs4000 4tx/tx Firmware

Innominate Mguard Rs4000 4tx/tx Vpn Firmware

Innominate Mguard Rs4000 4tx/3g/tx Vpn Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 3g Vpn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Vpn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Innominate Mguard Rs4000 4tx/tx Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Innominate Mguard Rs4000 4tx/tx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Innominate Mguard Rs4000 4tx/tx Vpn Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Innominate Mguard Rs4000 4tx/tx Vpn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Innominate Mguard Rs4000 4tx/3g/tx Vpn Firmware	Before 8.8.3

Running on/with	Platform Versions
Phoenixcontact Innominate Mguard Rs4000 4tx/3g/tx Vpn	All versions

Related CWEs

CWE-909

Missing Initialization of Resource

The product does not initialize a critical resource.

References (2)

https://cert.vde.com/en-us/advisories/vde-2020-046

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2020-046

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.