CVE-2023-2673
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD (Secondary)
Description
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
Affected (26)
Products: Phoenixcontact: Fl Mguard 2102 Firmware, Fl Mguard 4102 Pci Firmware, Fl Mguard 4102 Pcie Firmware, Fl Mguard 4302 Firmware, Fl Mguard Centerport Firmware, Fl Mguard Centerport Vpn 1000 Firmware, Fl Mguard Core Tx Firmware, Fl Mguard Core Tx Vpn Firmware, Fl Mguard Delta Tx/tx Firmware, Fl Mguard Delta Tx/tx Vpn Firmware, Fl Mguard Gt/gt Firmware, Fl Mguard Gt/gt Vpn Firmware, Fl Mguard Pci4000 Firmware, Fl Mguard Pci4000 Vpn Firmware, Fl Mguard Pcie4000 Firmware, Fl Mguard Pcie4000 Vpn Firmware, Fl Mguard Rs2000 Tx/tx B Firmware, Fl Mguard Rs2000 Tx/tx Vpn Firmware, Fl Mguard Rs2005 Tx Vpn Firmware, Fl Mguard Rs4000 Tx/tx M Firmware, Fl Mguard Rs4000 Tx/tx P Firmware, Fl Mguard Rs4000 Tx/tx Vpn Firmware, Fl Mguard Rs4004 Tx/dtx Firmware, Fl Mguard Rs4004 Tx/dtx Vpn Firmware, Fl Mguard Smart2 Firmware, Fl Mguard Smart2 Vpn Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 10.1.1 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard 2102 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 10.1.1 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard 4102 Pci | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 10.1.1 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard 4102 Pcie | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 10.1.1 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard 4302 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Centerport | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Centerport Vpn 1000 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Core Tx | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Core Tx Vpn | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Delta Tx/tx | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Delta Tx/tx Vpn | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Gt/gt | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Gt/gt Vpn | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Pci4000 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Pci4000 Vpn | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Pcie4000 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Pcie4000 Vpn | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs2000 Tx/tx B | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs2000 Tx/tx Vpn | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs2005 Tx Vpn | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs4000 Tx/tx M | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs4000 Tx/tx P | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs4000 Tx/tx Vpn | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs4004 Tx/dtx | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Smart2 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.9.0 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Fl Mguard Smart2 Vpn | All versions |
References (2)
Source: info@cert.vde.com
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Timeline
No history available yet.