TI-2024-29038 Aliases CVE-2024-43389 GHSA-cv2j-h5xr-4xvm

Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices

LOW 36CWE-94Published 2024-09-10 · Updated 2025-08-22

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: None · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00519 44th percentileScored 2026-11-07

Fix Fixed FL MGUARD 2102 (PHOENIX CONTACT): 10.4.1FL MGUARD 2105 (PHOENIX CONTACT): 10.4.1+34 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Phoenix Contact	FL MGUARD 2102	before 10.4.1	10.4.1	Patch available	CNA
Phoenix Contact	FL MGUARD 2105	before 10.4.1	10.4.1	Patch available	CNA
Phoenix Contact	FL MGUARD 4102 PCI	before 10.4.1	10.4.1	Patch available	CNA
Phoenix Contact	FL MGUARD 4102 PCIE	before 10.4.1	10.4.1	Patch available	CNA
Phoenix Contact	FL MGUARD 4302	before 10.4.1	10.4.1	Patch available	CNA
Phoenix Contact	FL MGUARD 4305	before 10.4.1	10.4.1	Patch available	CNA
Phoenix Contact	FL MGUARD CENTERPORT VPN-1000	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD CORE TX	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD CORE TX VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD DELTA TX/TX	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD DELTA TX/TX VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD GT/GT	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD GT/GT VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD PCI4000	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD PCI4000 VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD PCIE4000	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD PCIE4000 VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS2000 TX/TX-B	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS2000 TX/TX VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS2005 TX VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS4000 TX/TX	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS4000 TX/TX-M	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS4000 TX/TX-P	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS4000 TX/TX VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS4004 TX/DTX	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD RS4004 TX/DTX VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD SMART2	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	FL MGUARD SMART2 VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS2000 3G VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS2000 4G ATT VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS2000 4G VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS2000 4G VZW VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS4000 3G VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS4000 4G ATT VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS4000 4G VPN	before 8.9.3	8.9.3	Patch available	CNA
Phoenix Contact	TC MGUARD RS4000 4G VZW VPN	before 8.9.3	8.9.3	Patch available	CNA

FL MGUARD 2102 VendorPhoenix Contact Affected before 10.4.1 Fixed in 10.4.1 Patch available CNA
FL MGUARD 2105 VendorPhoenix Contact Affected before 10.4.1 Fixed in 10.4.1 Patch available CNA
FL MGUARD 4102 PCI VendorPhoenix Contact Affected before 10.4.1 Fixed in 10.4.1 Patch available CNA
FL MGUARD 4102 PCIE VendorPhoenix Contact Affected before 10.4.1 Fixed in 10.4.1 Patch available CNA
FL MGUARD 4302 VendorPhoenix Contact Affected before 10.4.1 Fixed in 10.4.1 Patch available CNA
FL MGUARD 4305 VendorPhoenix Contact Affected before 10.4.1 Fixed in 10.4.1 Patch available CNA
FL MGUARD CENTERPORT VPN-1000 VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD CORE TX VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD CORE TX VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD DELTA TX/TX VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD DELTA TX/TX VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD GT/GT VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD GT/GT VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD PCI4000 VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD PCI4000 VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD PCIE4000 VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD PCIE4000 VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS2000 TX/TX-B VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS2000 TX/TX VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS2005 TX VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS4000 TX/TX VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS4000 TX/TX-M VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS4000 TX/TX-P VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS4000 TX/TX VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS4004 TX/DTX VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD RS4004 TX/DTX VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD SMART2 VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
FL MGUARD SMART2 VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS2000 3G VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS2000 4G ATT VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS2000 4G VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS2000 4G VZW VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS4000 3G VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS4000 4G ATT VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS4000 4G VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA
TC MGUARD RS4000 4G VZW VPN VendorPhoenix Contact Affected before 8.9.3 Fixed in 8.9.3 Patch available CNA

CPE configurations NVD · 72

CPE	Versions	Role	Vendor
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_att_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_att_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_3g_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_3g_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact

cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_att_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_att_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_3g_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_3g_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact

Show 62 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_att_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_att_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_3g_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_3g_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_smart2_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_smart2_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_smart2_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_smart2:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4004_tx\/dtx_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4004_tx\/dtx_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4004_tx\/dtx_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4004_tx\/dtx:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx-p_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx-p:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx-m_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx-m:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs2005_tx_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs2005_tx_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs2000_tx\/tx_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs2000_tx\/tx_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs2000_tx\/tx-b_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs2000_tx\/tx-b:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pcie4000_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pcie4000_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pcie4000_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pcie4000:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pci4000_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pci4000_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pci4000_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pci4000:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_gt\/gt_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_gt\/gt_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_gt\/gt_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_gt\/gt:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_delta_tx\/tx_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_delta_tx\/tx_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_delta_tx\/tx_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_delta_tx\/tx:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_core_tx_vpn_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_core_tx_vpn:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_core_tx_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_core_tx:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_centerport_vpn-1000_firmware::::::::	before 8.9.3	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_centerport_vpn-1000:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4305_firmware::::::::	before 10.4.1	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4305:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4302_firmware::::::::	before 10.4.1	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4302:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4102_pcie_firmware::::::::	before 10.4.1	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4102_pcie:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4102_pci_firmware::::::::	before 10.4.1	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4102_pci:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_2105_firmware::::::::	before 10.4.1	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_2105:-:::::::*	not specified by NVD	Running on	Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_2102_firmware::::::::	before 10.4.1	Vulnerable	Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_2102:-:::::::*	not specified by NVD	Running on	Phoenixcontact

cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_att_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_att_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_3g_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_3g_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_smart2_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_smart2_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_smart2_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_smart2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4004_tx\/dtx_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4004_tx\/dtx_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4004_tx\/dtx_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4004_tx\/dtx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx-p_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx-m_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs4000_tx\/tx_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs4000_tx\/tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs2005_tx_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs2005_tx_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs2000_tx\/tx_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs2000_tx\/tx_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_rs2000_tx\/tx-b_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_rs2000_tx\/tx-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pcie4000_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pcie4000_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pcie4000_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pcie4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pci4000_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pci4000_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_pci4000_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_pci4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_gt\/gt_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_gt\/gt_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_gt\/gt_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_gt\/gt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_delta_tx\/tx_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_delta_tx\/tx_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_delta_tx\/tx_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_delta_tx\/tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_core_tx_vpn_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_core_tx_vpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_core_tx_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_core_tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_centerport_vpn-1000_firmware:*:*:*:*:*:*:*:* Versions before 8.9.3 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_centerport_vpn-1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4305_firmware:*:*:*:*:*:*:*:* Versions before 10.4.1 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4305:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4302_firmware:*:*:*:*:*:*:*:* Versions before 10.4.1 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4302:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4102_pcie_firmware:*:*:*:*:*:*:*:* Versions before 10.4.1 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4102_pcie:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_4102_pci_firmware:*:*:*:*:*:*:*:* Versions before 10.4.1 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_4102_pci:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_2105_firmware:*:*:*:*:*:*:*:* Versions before 10.4.1 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_2105:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
cpe:2.3:o:phoenixcontact:fl_mguard_2102_firmware:*:*:*:*:*:*:*:* Versions before 10.4.1 Vulnerable ·Phoenixcontact
cpe:2.3:h:phoenixcontact:fl_mguard_2102:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact

Remediation

Fix · CNA FL MGUARD 2102 (PHOENIX CONTACT) Fixed in 10.4.1
Fix · CNA FL MGUARD 2105 (PHOENIX CONTACT) Fixed in 10.4.1
Fix · CNA FL MGUARD 4102 PCI (PHOENIX CONTACT) Fixed in 10.4.1
Fix · CNA FL MGUARD 4102 PCIE (PHOENIX CONTACT) Fixed in 10.4.1
Fix · CNA FL MGUARD 4302 (PHOENIX CONTACT) Fixed in 10.4.1
Fix · CNA FL MGUARD 4305 (PHOENIX CONTACT) Fixed in 10.4.1
Fix · CNA FL MGUARD CENTERPORT VPN-1000 (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD CORE TX (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD CORE TX VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD DELTA TX/TX (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD DELTA TX/TX VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD GT/GT (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD GT/GT VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD PCI4000 (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD PCI4000 VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD PCIE4000 (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD PCIE4000 VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS2000 TX/TX-B (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS2000 TX/TX VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS2005 TX VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS4000 TX/TX (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS4000 TX/TX-M (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS4000 TX/TX-P (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS4000 TX/TX VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS4004 TX/DTX (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD RS4004 TX/DTX VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD SMART2 (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA FL MGUARD SMART2 VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS2000 3G VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS2000 4G ATT VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS2000 4G VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS2000 4G VZW VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS4000 3G VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS4000 4G ATT VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS4000 4G VPN (PHOENIX CONTACT) Fixed in 8.9.3
Fix · CNA TC MGUARD RS4000 4G VZW VPN (PHOENIX CONTACT) Fixed in 8.9.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2024-09-10
PHOENIX CONTACT FL MGUARD 2102, FL MGUARD 2105 and 34 more products 10.4.1, 8.9.3
12 records Highest priority Priority MEDIUM 5 MEDIUM, 7 LOW
Other records, highest priority first
- TI-2024-29037 Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devicesPriority MEDIUM 41
- TI-2024-29036 Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devicesPriority MEDIUM 41
- TI-2024-29035 Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.Priority MEDIUM 41
Show all 12 records →

Timeline

2026-10-02 Threatist record created from CVE-2024-43389
2026-10-03 Alias added: GHSA-cv2j-h5xr-4xvm

References

Advisory 1

https://cert.vde.com/en/advisories/VDE-2024-039

TI-2014-07463 Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function CVSS 2.0CRITICAL 10.0
TI-2024-17093 PHOENIX CONTACT: Remote code execution in CHARX Series CVSS 3.1CRITICAL 9.8
TI-2022-13692 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers CVSS 3.1CRITICAL 9.8
TI-2026-21959 Remote code execution via uploading a malicious IODD file CVSS 3.1CRITICAL 9.8
TI-2026-21940 Authentication Bypass in _account_log CVSS 3.1CRITICAL 9.8
TI-2023-03334 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels CVSS 3.1CRITICAL 10.0

See all 194 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences