CVE-2023-2673 — Improper Validation of Specified Type of Input in Contact FL Mguard 2102

CWE-1287 — Improper Validation of Specified Type of InputCWE-20 — Improper Input Validation3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.0%
top 93.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
52
Phoenix Contact FL Mguard 2102Phoenix Contact FL Mguard 4102 PCIPhoenix Contact FL Mguard 4102 Pcie+49 more
Timeline
PublishedJun 13

Description

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages52 packages

🔴Vulnerability Details

2
GHSA
GHSA-fw3q-vjp3-89w5: Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules a↗2023-06-13
▶
CVEList
PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation↗2023-06-13
▶
CVE-2023-2673 — Contact FL Mguard 2102 vulnerability | cvebase