Phoenixcontact Fl Mguard Centerport Firmware vulnerabilities
3 known vulnerabilities affecting phoenixcontact/fl_mguard_centerport_firmware.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-43384P3HIGHCVSS 8.0fixed in 8.9.32026-05-07
CVE-2024-43384 [HIGH] CWE-212 CVE-2024-43384: A low privileged remote attacker can gain the root password due to improper removal of sensitive inf
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
nvd
CVE-2022-3480P3HIGHCVSS 7.5fixed in 8.9.02022-11-15
CVE-2022-3480 [HIGH] CWE-770 CVE-2022-3480: A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.
nvd
CVE-2023-2673P4MEDIUMCVSS 5.3≤ 8.9.02023-06-13
CVE-2023-2673 [MEDIUM] CWE-1287 CVE-2023-2673: Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
nvd