CVE-2023-2673
PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- PHOENIX CONTACT FL MGUARD 2102
through 10.1.1
- PHOENIX CONTACT FL MGUARD 4102 PCI
through 10.1.1
- PHOENIX CONTACT FL MGUARD 4102 PCIE
through 10.1.1
- PHOENIX CONTACT FL MGUARD 4302
through 10.1.1
- PHOENIX CONTACT FL MGUARD CENTERPORT
through 8.9.0
- PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000
through 8.9.0
- PHOENIX CONTACT FL MGUARD CORE TX
through 8.9.0
- PHOENIX CONTACT FL MGUARD CORE TX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD DELTA TX/TX
through 8.9.0
- PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD GT/GT
through 8.9.0
- PHOENIX CONTACT FL MGUARD GT/GT VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD PCI4000
through 8.9.0
- PHOENIX CONTACT FL MGUARD PCI4000 VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD PCIE4000
through 8.9.0
- PHOENIX CONTACT FL MGUARD PCIE4000 VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS2005 TX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS4004 TX/DTX
through 8.9.0
- PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN
through 8.9.0
- PHOENIX CONTACT FL MGUARD SMART2
through 8.9.0
- PHOENIX CONTACT FL MGUARD SMART2 VPN
through 8.9.0