CVE-2024-43392

Published: Sep 10, 2024Modified: Aug 22, 2025

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD (Secondary)

Description

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.

Affected (30)

Phoenixcontact

30 products

Tc Mguard Rs4000 4g Vzw Vpn Firmware

Tc Mguard Rs4000 4g Vpn Firmware

Tc Mguard Rs4000 4g Att Vpn Firmware

Tc Mguard Rs4000 3g Vpn Firmware

Tc Mguard Rs2000 4g Vzw Vpn Firmware

Tc Mguard Rs2000 4g Vpn Firmware

Tc Mguard Rs2000 4g Att Vpn Firmware

Tc Mguard Rs2000 3g Vpn Firmware

Fl Mguard Smart2 Vpn Firmware

Fl Mguard Smart2 Firmware

Fl Mguard Rs4004 Tx/dtx Vpn Firmware

Fl Mguard Rs4004 Tx/dtx Firmware

Fl Mguard Rs4000 Tx/tx Vpn Firmware

Fl Mguard Rs4000 Tx/tx P Firmware

Fl Mguard Rs4000 Tx/tx M Firmware

Fl Mguard Rs4000 Tx/tx Firmware

Fl Mguard Rs2005 Tx Vpn Firmware

Fl Mguard Rs2000 Tx/tx Vpn Firmware

Fl Mguard Rs2000 Tx/tx B Firmware

Fl Mguard Pcie4000 Vpn Firmware

Fl Mguard Pcie4000 Firmware

Fl Mguard Pci4000 Vpn Firmware

Fl Mguard Pci4000 Firmware

Fl Mguard Gt/gt Vpn Firmware

Fl Mguard Gt/gt Firmware

Fl Mguard Delta Tx/tx Vpn Firmware

Fl Mguard Delta Tx/tx Firmware

Fl Mguard Core Tx Vpn Firmware

Fl Mguard Core Tx Firmware

Fl Mguard Centerport Vpn 1000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Vpn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs4000 3g Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs4000 3g Vpn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 4g Vzw Vpn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 4g Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 4g Vpn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 4g Att Vpn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Tc Mguard Rs2000 3g Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Tc Mguard Rs2000 3g Vpn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Smart2 Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Smart2 Vpn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Smart2 Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Smart2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Vpn	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4004 Tx/dtx	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx Vpn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx P Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx P	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx M Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx M	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs4000 Tx/tx	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs2005 Tx Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs2005 Tx Vpn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx Vpn	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx B Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Rs2000 Tx/tx B	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pcie4000 Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pcie4000 Vpn	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pcie4000 Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pcie4000	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pci4000 Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pci4000 Vpn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Pci4000 Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Pci4000	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Gt/gt Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Gt/gt Vpn	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Gt/gt Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Gt/gt	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Delta Tx/tx Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Delta Tx/tx Vpn	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Delta Tx/tx Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Delta Tx/tx	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Core Tx Vpn Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Core Tx Vpn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Core Tx Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Core Tx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard Centerport Vpn 1000 Firmware	Before 8.9.3

Running on/with	Platform Versions
Phoenixcontact Fl Mguard Centerport Vpn 1000	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

https://cert.vde.com/en/advisories/VDE-2024-039

Source: info@cert.vde.com

Third Party Advisory

Timeline

No history available yet.