Vulnerabilities

TI-2020-10016 CVE-2020-12523 · GHSA-fwfg-74jc-wgx8

Missing initialization of resource in Phoenix Contact TC MGUARD RS4000 4G VZW VPN

MEDIUM 41

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00899 Published 2020-12-17 Fixed in 8.8.3 CWE-909

TI-2015-03352 CVE-2015-3966 · GHSA-9rmr-v76m-g3pp

The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before…

LOW 22

The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to sen…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01616 Published 2015-08-30 No fix listed CWE-20

TI-2014-07461 CVE-2014-9193 · GHSA-rh9r-8973-rv59

Innominate mGuard Improper Privilege Management

MEDIUM 44

Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03127 Published 2014-12-20 Fixed in 7.6.6, 8.1.4 CWE-269

TI-2014-01871 CVE-2014-2356 · GHSA-p4h7-mjq9-xwq7

Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor

LOW 29

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03376 Published 2014-07-30 Fixed in 7.6.4, 8.0.3 +2 CWE-200

TI-2012-02609 CVE-2012-3006 · GHSA-6jfx-f78m-7wmf

The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard…

LOW 34

The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software…

CVSS 2.0HIGH 7.1 Network Low privileges Interaction — EPSS 0.01163 Published 2012-06-19 No fix listed CWE-310