title: PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
description: Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: FL MGUARD 2102
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 10.1.1, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD 4102 PCI
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 10.1.1, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD 4102 PCIE
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 10.1.1, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD 4302
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 10.1.1, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD CENTERPORT
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD CENTERPORT VPN-1000
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD CORE TX
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD CORE TX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD DELTA TX/TX
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD DELTA TX/TX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD GT/GT
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD GT/GT VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD PCI4000
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD PCI4000 VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD PCIE4000
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD PCIE4000 VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS2000 TX/TX-B
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS2000 TX/TX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS2005 TX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS4000 TX/TX-M
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS4000 TX/TX-P
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS4000 TX/TX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS4000 TX/TX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS4004 TX/DTX
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD RS4004 TX/DTX VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD SMART2
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: FL MGUARD SMART2 VPN
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 8.9.0, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL