high7.5
CVE-2022-3480
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger n…
Impact
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Mguard Centerport Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Centerport Vpn-1000 Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Core Tx Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Core Tx Vpn Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Delta Tx\/Tx Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Delta Tx\/Tx Vpn Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Gt\/Gt Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Gt\/Gt Vpn Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Pci4000 Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Pci4000 Vpn Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Pcie4000 Firmware | before 8.9.0 |
| Phoenixcontact | Fl Mguard Pcie4000 Vpn Firmware | before 8.9.0 |