CVE Feed

    Dashboard / CVE / CVE-2023-2673

    CVE-2023-2673

    Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.

    Published:Jun 13, 2023
    Last Modified:Jan 3, 2025
    EPS:Jun 13, 2023
    EPSS Score:0.00021
    CVSS Score:5.3

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Fl Mguard 2102
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 2102 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pci
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pci Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pcie
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pcie Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4302
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4302 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Centerport
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Centerport Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Centerport Vpn-1000
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Centerport Vpn-1000 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000 Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000 Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000 Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000 Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx-b
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx-b Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2005 Tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2005 Tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-m
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-m Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-p
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-p Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2 Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2 Vpn Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-43384 (CVSS 8) — A low privileged remote attacker can gain the root password due to improper removal of sensitive information b…
    CVE-2024-43393 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the firewall services, including packet …
    CVE-2024-43391 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the firewall services, including packet …
    CVE-2024-43390 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the firewall services, including packet …
    CVE-2024-43389 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.…
    CVE-2024-43388 (CVSS 8.8) — A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input…
    CVE-2024-43387 (CVSS 8.8) — A low privileged remote attacker can read and write files as root due to improper neutralization of special el…
    CVE-2024-43386 (CVSS 8.8) — A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper ne…
    CVE-2024-43385 (CVSS 8.8) — A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper ne…
    CVE-2024-7699 (CVSS 8.8) — An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High