CVEvulnerability

CVE-2023-2673

5.3 MEDIUM Published 2023-06-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-1287

Description

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.

Affected configurations

• phoenixcontact fl mguard 2102 firmware (<= 10.1.1) • phoenixcontact fl mguard 4102 pci firmware (<= 10.1.1) • phoenixcontact fl mguard 4102 pcie firmware (<= 10.1.1) • phoenixcontact fl mguard 4302 firmware (<= 10.1.1) • phoenixcontact fl mguard centerport firmware (<= 8.9.0) • phoenixcontact fl mguard centerport vpn-1000 firmware (<= 8.9.0) • phoenixcontact fl mguard core tx firmware (<= 8.9.0) • phoenixcontact fl mguard core tx vpn firmware (<= 8.9.0) • phoenixcontact fl mguard delta tx\/tx firmware (<= 8.9.0) • phoenixcontact fl mguard delta tx\/tx vpn firmware (<= 8.9.0) • phoenixcontact fl mguard gt\/gt firmware (<= 8.9.0) • phoenixcontact fl mguard gt\/gt vpn firmware (<= 8.9.0) • phoenixcontact fl mguard pci4000 firmware (<= 8.9.0) • phoenixcontact fl mguard pci4000 vpn firmware (<= 8.9.0) • phoenixcontact fl mguard pcie4000 firmware (<= 8.9.0) • phoenixcontact fl mguard pcie4000 vpn firmware (<= 8.9.0) • phoenixcontact fl mguard rs2000 tx\/tx-b firmware (<= 8.9.0) • phoenixcontact fl mguard rs2000 tx\/tx vpn firmware (<= 8.9.0) • phoenixcontact fl mguard rs2005 tx vpn firmware (<= 8.9.0) • phoenixcontact fl mguard rs4000 tx\/tx-m firmware (<= 8.9.0) • phoenixcontact fl mguard rs4000 tx\/tx-p firmware (<= 8.9.0) • phoenixcontact fl mguard rs4000 tx\/tx vpn firmware (<= 8.9.0) • phoenixcontact fl mguard rs4004 tx\/dtx firmware (<= 8.9.0) • phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware (<= 8.9.0) • phoenixcontact fl mguard smart2 firmware (<= 8.9.0) • phoenixcontact fl mguard smart2 vpn firmware (<= 8.9.0)

Related

Weakness · CWE (1)

  • CWE-1287 Improper Validation of Specified Type of Input weakness

References