CVE-2024-43392

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.

Score

CVSS 3.1 8.1 High

Status

Modified - info@cert.vde.com

Published

2024-09-10

Last modified

2025-08-22

Weaknesses

CWE-94

Affected products

• Fl Mguard 2102 (Phoenix Contact)
• Fl Mguard 2105 (Phoenix Contact)
• Fl Mguard 4102 Pci (Phoenix Contact)
• Fl Mguard 4102 Pcie (Phoenix Contact)
• Fl Mguard 4302 (Phoenix Contact)
• Fl Mguard 4305 (Phoenix Contact)
• Fl Mguard Centerport Vpn-1000 (Phoenix Contact)
• Fl Mguard Core Tx (Phoenix Contact)
• Fl Mguard Core Tx Vpn (Phoenix Contact)
• Fl Mguard Delta Txtx (Phoenix Contact)
• Fl Mguard Delta Txtx Vpn (Phoenix Contact)
• Fl Mguard Gtgt (Phoenix Contact)
• Fl Mguard Gtgt Vpn (Phoenix Contact)
• Fl Mguard Pci4000 (Phoenix Contact)
• Fl Mguard Pci4000 Vpn (Phoenix Contact)
• Fl Mguard Pcie4000 (Phoenix Contact)
• Fl Mguard Pcie4000 Vpn (Phoenix Contact)
• Fl Mguard Rs2000 Txtx-b (Phoenix Contact)
• Fl Mguard Rs2000 Txtx Vpn (Phoenix Contact)
• Fl Mguard Rs2005 Tx Vpn (Phoenix Contact)
• Fl Mguard Rs4000 Txtx (Phoenix Contact)
• Fl Mguard Rs4000 Txtx-m (Phoenix Contact)
• Fl Mguard Rs4000 Txtx-p (Phoenix Contact)
• Fl Mguard Rs4000 Txtx Vpn (Phoenix Contact)
• Fl Mguard Rs4004 Txdtx (Phoenix Contact)
• Fl Mguard Rs4004 Txdtx Vpn (Phoenix Contact)
• Fl Mguard Smart2 (Phoenix Contact)
• Fl Mguard Smart2 Vpn (Phoenix Contact)
• Tc Mguard Rs2000 3g Vpn (Phoenix Contact)
• Tc Mguard Rs2000 4g Att Vpn (Phoenix Contact)
• Tc Mguard Rs2000 4g Vpn (Phoenix Contact)
• Tc Mguard Rs2000 4g Vzw Vpn (Phoenix Contact)
• Tc Mguard Rs4000 3g Vpn (Phoenix Contact)
• Tc Mguard Rs4000 4g Att Vpn (Phoenix Contact)
• Tc Mguard Rs4000 4g Vpn (Phoenix Contact)
• Tc Mguard Rs4000 4g Vzw Vpn (Phoenix Contact)
• Fl Mguard Centerport Vpn-1000 Firmware (Phoenixcontact)
• Fl Mguard Core Tx Firmware (Phoenixcontact)
• Fl Mguard Core Tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Delta Tx/tx Firmware (Phoenixcontact)
• Fl Mguard Delta Tx/tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Gt/gt Firmware (Phoenixcontact)
• Fl Mguard Gt/gt Vpn Firmware (Phoenixcontact)
• Fl Mguard Pci4000 Firmware (Phoenixcontact)
• Fl Mguard Pci4000 Vpn Firmware (Phoenixcontact)
• Fl Mguard Pcie4000 Firmware (Phoenixcontact)
• Fl Mguard Pcie4000 Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs2000 Tx/tx-b Firmware (Phoenixcontact)
• Fl Mguard Rs2000 Tx/tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs2005 Tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx-m Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx-p Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx Firmware (Phoenixcontact)
• Fl Mguard Rs4000 Tx/tx Vpn Firmware (Phoenixcontact)
• Fl Mguard Rs4004 Tx/dtx Firmware (Phoenixcontact)
• Fl Mguard Rs4004 Tx/dtx Vpn Firmware (Phoenixcontact)
• Fl Mguard Smart2 Firmware (Phoenixcontact)
• Fl Mguard Smart2 Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 3g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 4g Att Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 4g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs2000 4g Vzw Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 3g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 4g Att Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 4g Vpn Firmware (Phoenixcontact)
• Tc Mguard Rs4000 4g Vzw Vpn Firmware (Phoenixcontact)

References

• https://cert.vde.com/en/advisories/VDE-2024-039