CVE-2024-43385

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.

Score

CVSS 3.1 8.8 High

Status

Analyzed - info@cert.vde.com

Published

2024-09-10

Last modified

2024-09-10

Weaknesses

CWE-78

Affected products

• Fl Mguard 2102 (Phoenix Contact)
• Fl Mguard 2105 (Phoenix Contact)
• Fl Mguard 4102 Pci (Phoenix Contact)
• Fl Mguard 4102 Pcie (Phoenix Contact)
• Fl Mguard 4302 (Phoenix Contact)
• Fl Mguard 4305 (Phoenix Contact)
• Fl Mguard Centerport Vpn-1000 (Phoenix Contact)
• Fl Mguard Core Tx (Phoenix Contact)
• Fl Mguard Core Tx Vpn (Phoenix Contact)
• Fl Mguard Delta Txtx (Phoenix Contact)
• Fl Mguard Delta Txtx Vpn (Phoenix Contact)
• Fl Mguard Gtgt (Phoenix Contact)
• Fl Mguard Gtgt Vpn (Phoenix Contact)
• Fl Mguard Pci4000 (Phoenix Contact)
• Fl Mguard Pci4000 Vpn (Phoenix Contact)
• Fl Mguard Pcie4000 (Phoenix Contact)
• Fl Mguard Pcie4000 Vpn (Phoenix Contact)
• Fl Mguard Rs2000 Txtx-b (Phoenix Contact)
• Fl Mguard Rs2000 Txtx Vpn (Phoenix Contact)
• Fl Mguard Rs2005 Tx Vpn (Phoenix Contact)
• Fl Mguard Rs4000 Txtx (Phoenix Contact)
• Fl Mguard Rs4000 Txtx-m (Phoenix Contact)
• Fl Mguard Rs4000 Txtx-p (Phoenix Contact)
• Fl Mguard Rs4000 Txtx Vpn (Phoenix Contact)
• Fl Mguard Rs4004 Txdtx (Phoenix Contact)
• Fl Mguard Rs4004 Txdtx Vpn (Phoenix Contact)
• Fl Mguard Smart2 (Phoenix Contact)
• Fl Mguard Smart2 Vpn (Phoenix Contact)
• Tc Mguard Rs2000 3g Vpn (Phoenix Contact)
• Tc Mguard Rs2000 4g Att Vpn (Phoenix Contact)
• Tc Mguard Rs2000 4g Vpn (Phoenix Contact)
• Tc Mguard Rs2000 4g Vzw Vpn (Phoenix Contact)
• Tc Mguard Rs4000 3g Vpn (Phoenix Contact)
• Tc Mguard Rs4000 4g Att Vpn (Phoenix Contact)
• Tc Mguard Rs4000 4g Vpn (Phoenix Contact)
• Tc Mguard Rs4000 4g Vzw Vpn (Phoenix Contact)
• Fl Mguard 2102 Firmware (Phoenixcontact)
• Fl Mguard 2105 Firmware (Phoenixcontact)
• Fl Mguard 4102 Pci Firmware (Phoenixcontact)
• Fl Mguard 4102 Pcie Firmware (Phoenixcontact)
• Fl Mguard 4302 Firmware (Phoenixcontact)
• Fl Mguard 4305 Firmware (Phoenixcontact)
• Fl Mguard Centerport Vpn-1000 Firmware (Phoenixcontact)
• Fl Mguard Core Tx Firmware (Phoenixcontact)
• Fl Mguard Core Tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Delta Tx/tx Firmware (Phoenixcontact)
• Fl Mguard Delta Tx/tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Gt/gt Firmware (Phoenixcontact)
• Fl Mguard Gt/gt Vpn Firmware (Phoenixcontact)
• Fl Mguard Pci4000 Firmware (Phoenixcontact)
• Fl Mguard Pci4000 Vpn Firmware (Phoenixcontact)
• Fl Mguard Pcie4000 Firmware (Phoenixcontact)
• Fl Mguard Pcie4000 Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs2000 Tx/tx-b Firmware (Phoenixcontact)
• Fl Mguard Rs2000 Tx/tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs2005 Tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx-m Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx-p Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs4004 Tx/dtx Firmware (Phoenixcontact)
• Fl Mguard Rs4004 Tx/dtx Vpn Firmware (Phoenixcontact)
• Fl Mguard Smart2 Firmware (Phoenixcontact)
• Fl Mguard Smart2 Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 3g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 4g Att Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 4g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 4g Vzw Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 3g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 4g Att Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 4g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 4g Vzw Vpn Firmware (Phoenixcontact)

References

• https://cert.vde.com/en/advisories/VDE-2024-039