CVE-2024-43389: Phoenixcontact Fl Mguard 2102 Firmware

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.

Affected products

• Phoenixcontact Fl Mguard 2102 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 2105 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4102 Pci Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4102 Pcie Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4302 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4305 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard Centerport VPN-1000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Core Tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Core Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Delta Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Delta Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Gt/gt Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Gt/gt VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCI4000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCI4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCIE4000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCIE4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2000 Tx/tx-B Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2005 Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx-M Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx-P Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4004 Tx/dtx Firmware: before 8.9.3 (fixed in 8.9.3)
• and 11 more

Published 2024-09-10. Last modified 2026-06-17.