high8.8
CVE-2024-43385
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable …
Impact
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Tc Mguard Rs4000 4g Vzw Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs4000 4g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs4000 4g Att Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs4000 3g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 4g Vzw Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 4g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 4g Att Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 3g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Smart2 Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Smart2 Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Rs4004 Tx\/Dtx Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Rs4004 Tx\/Dtx Firmware | before 8.9.3 |