CVE-2024-43392
HIGH EPSS 40.1%
Published Sep 10, 20241y ago · Modified Jun 17, 20261w ago
8.1 CVSS 3.1
Published Sep 10, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
40.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-94 Improper Control of Generation of Code (Code Injection) Injection
Affected Products 60
| Vendor | Product | Version | Range |
|---|---|---|---|
| phoenixcontact | tc_mguard_rs4000_4g_vzw_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs4000_4g_vzw_vpn | * | any |
| phoenixcontact | tc_mguard_rs4000_4g_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs4000_4g_vpn | * | any |
| phoenixcontact | tc_mguard_rs4000_4g_att_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs4000_4g_att_vpn | * | any |
| phoenixcontact | tc_mguard_rs4000_3g_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs4000_3g_vpn | * | any |
| phoenixcontact | tc_mguard_rs2000_4g_vzw_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs2000_4g_vzw_vpn | * | any |
| phoenixcontact | tc_mguard_rs2000_4g_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs2000_4g_vpn | * | any |
| phoenixcontact | tc_mguard_rs2000_4g_att_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs2000_4g_att_vpn | * | any |
| phoenixcontact | tc_mguard_rs2000_3g_vpn_firmware | * | <8.9.3 |
| phoenixcontact | tc_mguard_rs2000_3g_vpn | * | any |
| phoenixcontact | fl_mguard_smart2_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_smart2_vpn | * | any |
| phoenixcontact | fl_mguard_smart2_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_smart2 | * | any |
| phoenixcontact | fl_mguard_rs4004_tx\/dtx_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs4004_tx\/dtx_vpn | * | any |
| phoenixcontact | fl_mguard_rs4004_tx\/dtx_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs4004_tx\/dtx | * | any |
| phoenixcontact | fl_mguard_rs4000_tx\/tx_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx_vpn | * | any |
| phoenixcontact | fl_mguard_rs4000_tx\/tx-p_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx-p | * | any |
| phoenixcontact | fl_mguard_rs4000_tx\/tx-m_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx-m | * | any |
| phoenixcontact | fl_mguard_rs4000_tx\/tx_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx | * | any |
| phoenixcontact | fl_mguard_rs2005_tx_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs2005_tx_vpn | * | any |
| phoenixcontact | fl_mguard_rs2000_tx\/tx_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs2000_tx\/tx_vpn | * | any |
| phoenixcontact | fl_mguard_rs2000_tx\/tx-b_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_rs2000_tx\/tx-b | * | any |
| phoenixcontact | fl_mguard_pcie4000_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_pcie4000_vpn | * | any |
| phoenixcontact | fl_mguard_pcie4000_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_pcie4000 | * | any |
| phoenixcontact | fl_mguard_pci4000_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_pci4000_vpn | * | any |
| phoenixcontact | fl_mguard_pci4000_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_pci4000 | * | any |
| phoenixcontact | fl_mguard_gt\/gt_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_gt\/gt_vpn | * | any |
| phoenixcontact | fl_mguard_gt\/gt_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_gt\/gt | * | any |
| phoenixcontact | fl_mguard_delta_tx\/tx_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_delta_tx\/tx_vpn | * | any |
| phoenixcontact | fl_mguard_delta_tx\/tx_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_delta_tx\/tx | * | any |
| phoenixcontact | fl_mguard_core_tx_vpn_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_core_tx_vpn | * | any |
| phoenixcontact | fl_mguard_core_tx_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_core_tx | * | any |
| phoenixcontact | fl_mguard_centerport_vpn-1000_firmware | * | <8.9.3 |
| phoenixcontact | fl_mguard_centerport_vpn-1000 | * | any |
References 1
- cert.vde.com https://cert.vde.com/en/advisories/VDE-2024-039
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.