CVEvulnerability
CVE-2017-7937
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.0 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-287
Description
An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.
Affected configurations
• phoenix contact gmbh mguard firmware 8.3.0
• phoenix contact gmbh mguard firmware 8.3.1
• phoenix contact gmbh mguard firmware 8.3.2
• phoenix contact gmbh mguard firmware 8.4.0
• phoenix contact gmbh mguard firmware 8.4.1
• phoenix contact gmbh mguard firmware 8.4.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01 Third Party Advisory, US Government Resource