cbcvebase.
CVE-2020-12523
published 2020-12-17

CVE-2020-12523: On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard…

PriorityP351critical9.1CVSS 3.1
AVNACLPRNUINSUCHINAH
EPSS
0.89%
55.2th percentile
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource

Affected

17 ranges
VendorProductVersion rangeFixed in
innominateinnominate_mguard_rs4000_4tx_3g_tx_vpn>= unspecified < 8.8.38.8.3
innominateinnominate_mguard_rs4000_4tx_tx>= unspecified < 8.8.38.8.3
innominateinnominate_mguard_rs4000_4tx_tx_vpn>= unspecified < 8.8.38.8.3
phoenix_contactfl_mguard_rs4004_tx_dtx>= unspecified < 8.8.38.8.3
phoenix_contactfl_mguard_rs4004_tx_dtx_vpn>= unspecified < 8.8.38.8.3
phoenix_contacttc_mguard_rs4000_3g_vpn>= unspecified < 8.8.38.8.3
phoenix_contacttc_mguard_rs4000_4g_att_vpn>= unspecified < 8.8.38.8.3
phoenix_contacttc_mguard_rs4000_4g_vpn>= unspecified < 8.8.38.8.3
phoenix_contacttc_mguard_rs4000_4g_vzw_vpn>= unspecified < 8.8.38.8.3
phoenixcontactfl_mguard_rs4004_tx_dtx_firmware< 8.8.38.8.3
phoenixcontactfl_mguard_rs4004_tx_dtx_vpn_firmware< 8.8.38.8.3
phoenixcontactinnominate_mguard_rs4000_4tx_3g_tx_vpn_firmware< 8.8.38.8.3
phoenixcontactinnominate_mguard_rs4000_4tx_tx_firmware< 8.8.38.8.3
phoenixcontactinnominate_mguard_rs4000_4tx_tx_vpn_firmware< 8.8.38.8.3
phoenixcontacttc_mguard_rs4000_4g_att_vpn_firmware< 8.8.38.8.3
phoenixcontacttc_mguard_rs4000_4g_vpn_firmware< 8.8.38.8.3
phoenixcontacttc_mguard_rs4000_4g_vzw_vpn_firmware< 8.8.38.8.3

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.