CVE-2024-43386: Phoenixcontact Fl Mguard 2102 Firmware

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.

Affected products

  • Phoenixcontact Fl Mguard 2102 Firmware: before 10.4.1 (fixed in 10.4.1)
  • Phoenixcontact Fl Mguard 2105 Firmware: before 10.4.1 (fixed in 10.4.1)
  • Phoenixcontact Fl Mguard 4102 Pci Firmware: before 10.4.1 (fixed in 10.4.1)
  • Phoenixcontact Fl Mguard 4102 Pcie Firmware: before 10.4.1 (fixed in 10.4.1)
  • Phoenixcontact Fl Mguard 4302 Firmware: before 10.4.1 (fixed in 10.4.1)
  • Phoenixcontact Fl Mguard 4305 Firmware: before 10.4.1 (fixed in 10.4.1)
  • Phoenixcontact Fl Mguard Centerport VPN-1000 Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard Core Tx Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard Core Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard Delta Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard Delta Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard Gt/gt Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard Gt/gt VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard PCI4000 Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard PCI4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard PCIE4000 Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard PCIE4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS2000 Tx/tx-B Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS2000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS2005 Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS4000 Tx/tx-M Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS4000 Tx/tx-P Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS4000 Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS4000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
  • Phoenixcontact Fl Mguard RS4004 Tx/dtx Firmware: before 8.9.3 (fixed in 8.9.3)
  • and 11 more

Published 2024-09-10. Last modified 2026-06-17.