CVEvulnerability

CVE-2024-7698

5.7 MEDIUM Published 2024-09-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-09-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-201

Description

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

Affected configurations

• phoenixcontact tc mguard rs4000 4g vzw vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs4000 4g vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs4000 4g att vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs4000 3g vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 4g vzw vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 4g vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 4g att vpn firmware (< 8.9.3) • phoenixcontact tc mguard rs2000 3g vpn firmware (< 8.9.3) • phoenixcontact fl mguard smart2 vpn firmware (< 8.9.3) • phoenixcontact fl mguard smart2 firmware (< 8.9.3) • phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs4004 tx\/dtx firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx-p firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx-m firmware (< 8.9.3) • phoenixcontact fl mguard rs4000 tx\/tx firmware (< 8.9.3) • phoenixcontact fl mguard rs2005 tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs2000 tx\/tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard rs2000 tx\/tx-b firmware (< 8.9.3) • phoenixcontact fl mguard pcie4000 vpn firmware (< 8.9.3) • phoenixcontact fl mguard pcie4000 firmware (< 8.9.3) • phoenixcontact fl mguard pci4000 vpn firmware (< 8.9.3) • phoenixcontact fl mguard pci4000 firmware (< 8.9.3) • phoenixcontact fl mguard gt\/gt vpn firmware (< 8.9.3) • phoenixcontact fl mguard gt\/gt firmware (< 8.9.3) • phoenixcontact fl mguard delta tx\/tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard delta tx\/tx firmware (< 8.9.3) • phoenixcontact fl mguard core tx vpn firmware (< 8.9.3) • phoenixcontact fl mguard core tx firmware (< 8.9.3) • phoenixcontact fl mguard centerport vpn-1000 firmware (< 8.9.3) • phoenixcontact fl mguard 4305 firmware (< 10.4.1) • phoenixcontact fl mguard 4302 firmware (< 10.4.1) • phoenixcontact fl mguard 4102 pcie firmware (< 10.4.1) • phoenixcontact fl mguard 4102 pci firmware (< 10.4.1) • phoenixcontact fl mguard 2105 firmware (< 10.4.1) • phoenixcontact fl mguard 2102 firmware (< 10.4.1)

Related

Weakness · CWE (1)

  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness

References