CVE-2023-2673
EUVD-2023-3413713.06.2023, 07:15
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| phoenixcontact | fl_mguard_2102_firmware | 𝑥 ≤ 10.1.1 |
| phoenixcontact | fl_mguard_4102_pci_firmware | 𝑥 ≤ 10.1.1 |
| phoenixcontact | fl_mguard_4102_pcie_firmware | 𝑥 ≤ 10.1.1 |
| phoenixcontact | fl_mguard_4302_firmware | 𝑥 ≤ 10.1.1 |
| phoenixcontact | fl_mguard_centerport_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_centerport_vpn-1000_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_core_tx_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_core_tx_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_delta_tx\/tx_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_delta_tx\/tx_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_gt\/gt_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_gt\/gt_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_pci4000_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_pci4000_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_pcie4000_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_pcie4000_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs2000_tx\/tx-b_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs2000_tx\/tx_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs2005_tx_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx-m_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx-p_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs4000_tx\/tx_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs4004_tx\/dtx_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_rs4004_tx\/dtx_vpn_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_smart2_firmware | 𝑥 ≤ 8.9.0 |
| phoenixcontact | fl_mguard_smart2_vpn_firmware | 𝑥 ≤ 8.9.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration