CVE Feed

    Dashboard / CVE / CVE-2024-7698

    CVE-2024-7698

    A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

    Published:Sep 10, 2024
    Last Modified:Aug 22, 2025
    EPS:Sep 10, 2024
    EPSS Score:0.00095
    CVSS Score:5.7

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Fl Mguard 2102
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 2102 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 2105
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 2105 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pci
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pci Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pcie
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4102 Pcie Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4302
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4302 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4305
    Vendor
    Phoenixcontact
    Product
    Fl Mguard 4305 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Centerport Vpn-1000
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Centerport Vpn-1000 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Core Tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Delta Tx\/tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Gt\/gt Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000 Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pci4000 Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000 Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Pcie4000 Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx-b
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx-b Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2000 Tx\/tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2005 Tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs2005 Tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-m
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-m Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-p
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx-p Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4000 Tx\/tx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Rs4004 Tx\/dtx Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2 Vpn
    Vendor
    Phoenixcontact
    Product
    Fl Mguard Smart2 Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 3g Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 3g Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 4g Att Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 4g Att Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 4g Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 4g Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 4g Vzw Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs2000 4g Vzw Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 3g Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 3g Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 4g Att Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 4g Att Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 4g Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 4g Vpn Firmware
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 4g Vzw Vpn
    Vendor
    Phoenixcontact
    Product
    Tc Mguard Rs4000 4g Vzw Vpn Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-43384 (CVSS 8) — A low privileged remote attacker can gain the root password due to improper removal of sensitive information b…
    CVE-2024-43393 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the firewall services, including packet …
    CVE-2024-43391 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the firewall services, including packet …
    CVE-2024-43390 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the firewall services, including packet …
    CVE-2024-43389 (CVSS 8.1) — A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.…
    CVE-2024-43388 (CVSS 8.8) — A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input…
    CVE-2024-43387 (CVSS 8.8) — A low privileged remote attacker can read and write files as root due to improper neutralization of special el…
    CVE-2024-43386 (CVSS 8.8) — A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper ne…
    CVE-2024-43385 (CVSS 8.8) — A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper ne…
    CVE-2024-7699 (CVSS 8.8) — An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High