CVE-2024-43392: Phoenixcontact Fl Mguard Centerport VPN-1000 Firmware

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.

Affected products

• Phoenixcontact Fl Mguard Centerport VPN-1000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Core Tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Core Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Delta Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Delta Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Gt/gt Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Gt/gt VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCI4000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCI4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCIE4000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCIE4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2000 Tx/tx-B Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2005 Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx-M Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx-P Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4004 Tx/dtx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4004 Tx/dtx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard SMART2 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard SMART2 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Tc Mguard RS2000 3g VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Tc Mguard RS2000 4g Att VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Tc Mguard RS2000 4g VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• and 5 more

Published 2024-09-10. Last modified 2026-06-17.