CVEvulnerability

CVE-2024-43391

8.1 HIGH Published 2024-09-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-09-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-94

Description

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.

Affected configurations

• phoenixcontact tc mguard rs4000 4g vzw vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs4000 4g vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs4000 4g att vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs4000 3g vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 4g vzw vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 4g vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 4g att vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 3g vpn firmware (< 8.9.3) • phoenixcontact fl mguard smart2 vpn firmware (< 8.9.3) • phoenixcontact fl mguard smart2 firmware (< 8.9.3) • phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs4004 tx\/dtx firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx-p firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx-m firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx firmware (< 8.9.3) • phoenixcontact fl mguard rs2005 tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs2000 tx\/tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs2000 tx\/tx-b firmware (< 8.9.3) • phoenixcontact fl mguard pcie4000 vpn firmware (< 8.9.3) • phoenixcontact fl mguard pcie4000 firmware (< 8.9.3) • phoenixcontact fl mguard pci4000 vpn firmware (< 8.9.3) • phoenixcontact fl mguard pci4000 firmware (< 8.9.3) • phoenixcontact fl mguard gt\/gt vpn firmware (< 8.9.3) • phoenixcontact fl mguard gt\/gt firmware (< 8.9.3) • phoenixcontact fl mguard delta tx\/tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard delta tx\/tx firmware (< 8.9.3) • phoenixcontact fl mguard core tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard core tx firmware (< 8.9.3) • phoenixcontact fl mguard centerport vpn-1000 firmware (< 8.9.3) • phoenixcontact fl mguard 4305 firmware (< 10.4.1) • phoenixcontact fl mguard 4302 firmware (< 10.4.1) • phoenixcontact fl mguard 4102 pcie firmware (< 10.4.1) • phoenixcontact fl mguard 4102 pci firmware (< 10.4.1) • phoenixcontact fl mguard 2105 firmware (< 10.4.1) • phoenixcontact fl mguard 2102 firmware (< 10.4.1)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References