high8.1
CVE-2024-43392
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control…
Impact
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Tc Mguard Rs4000 4g Vzw Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs4000 4g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs4000 4g Att Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs4000 3g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 4g Vzw Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 4g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 4g Att Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Tc Mguard Rs2000 3g Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Smart2 Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Smart2 Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Rs4004 Tx\/Dtx Vpn Firmware | before 8.9.3 |
| Phoenixcontact | Fl Mguard Rs4004 Tx\/Dtx Firmware | before 8.9.3 |