CVE-2022-3480

Published: Nov 15, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: info@cert.vde.com (Secondary)

Description

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.

Affected (31)

Phoenixcontact

31 products

Fl Mguard Centerport Firmware

Fl Mguard Centerport Vpn 1000 Firmware

Fl Mguard Core Tx Firmware

Fl Mguard Core Tx Vpn Firmware

Fl Mguard Delta Tx/tx Firmware

Fl Mguard Delta Tx/tx Vpn Firmware

Fl Mguard Gt/gt Firmware

Fl Mguard Gt/gt Vpn Firmware

Fl Mguard Pci4000 Firmware

Fl Mguard Pci4000 Vpn Firmware

Fl Mguard Pcie4000 Firmware

Fl Mguard Pcie4000 Vpn Firmware

Fl Mguard Rs2000 Tx/tx B Firmware

Fl Mguard Rs2000 Tx/tx Vpn Firmware

Fl Mguard Rs2005 Tx Vpn Firmware

Fl Mguard Rs4000 Tx/tx Firmware

Fl Mguard Rs4000 Tx/tx M Firmware

Fl Mguard Rs4000 Tx/tx P Firmware

Fl Mguard Rs4000 Tx/tx Vpn Firmware

Fl Mguard Rs4004 Tx/dtx Firmware

Fl Mguard Rs4004 Tx/dtx Vpn Firmware

Fl Mguard Smart2 Firmware

Fl Mguard Smart2 Vpn Firmware

Tc Mguard Rs2000 3g Vpn Firmware

Tc Mguard Rs2000 4g Att Vpn Firmware

Tc Mguard Rs2000 4g Vpn Firmware

Tc Mguard Rs2000 4g Vzw Vpn Firmware

Tc Mguard Rs4000 3g Vpn Firmware

Tc Mguard Rs4000 4g Att Vpn Firmware

Tc Mguard Rs4000 4g Vpn Firmware

Tc Mguard Rs4000 4g Vzw Vpn Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Centerport Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Centerport	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Centerport Vpn 1000 Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Centerport Vpn 1000	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Core Tx Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Core Tx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Core Tx Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Core Tx Vpn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Delta Tx/tx Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Delta Tx/tx	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Delta Tx/tx Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Delta Tx/tx Vpn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Gt/gt Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Gt/gt	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Gt/gt Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Gt/gt Vpn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pci4000 Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pci4000	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pci4000 Vpn	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pcie4000 Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pcie4000	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pcie4000 Vpn	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx B Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx B	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx Vpn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs2005 Tx Vpn	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx M Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx M	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx P Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx P	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx Vpn	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Smart2 Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Smart2	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Smart2 Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Smart2 Vpn	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 3g Vpn	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 4g Vpn	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 3g Vpn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Vpn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware	Before 8.9.0

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn	All versions

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://cert.vde.com/en/advisories/VDE-2022-051/

Source: info@cert.vde.com

MitigationThird Party Advisory

https://cert.vde.com/en/advisories/VDE-2022-051/

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party Advisory

Timeline

No history available yet.