high7.8
CVE-2018-5441
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0.
Impact
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Mguard Centerport Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Delta Tx\/Tx Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Delta Tx\/Tx Vpn Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Gt\/Gt Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Gt\/Gt Vpn Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Pci4000 Vpn Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Pcie4000 Vpn Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Rs2000 Tx\/Tx Vpn Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Rs2000 Tx\/Tx-B Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Rs2005 Tx Vpn Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Rs4000 Tx\/Tx Firmware | from 7.2.0 through 8.6.0 |
| Phoenixcontact | Mguard Rs4000 Tx\/Tx Vpn Firmware | from 7.2.0 through 8.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102907
- https://cert.vde.com/en-us/advisories/vde-2018-001
- https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01
- http://www.securityfocus.com/bid/102907
- https://cert.vde.com/en-us/advisories/vde-2018-001
- https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01