CVE-2024-43393: Phoenixcontact Fl Mguard 2102 Firmware

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.

Affected products

• Phoenixcontact Fl Mguard 2102 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 2105 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4102 Pci Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4102 Pcie Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4302 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard 4305 Firmware: before 10.4.1 (fixed in 10.4.1)
• Phoenixcontact Fl Mguard Centerport VPN-1000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Core Tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Core Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Delta Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Delta Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Gt/gt Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard Gt/gt VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCI4000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCI4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCIE4000 Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard PCIE4000 VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2000 Tx/tx-B Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS2005 Tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx-M Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx-P Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4000 Tx/tx VPN Firmware: before 8.9.3 (fixed in 8.9.3)
• Phoenixcontact Fl Mguard RS4004 Tx/dtx Firmware: before 8.9.3 (fixed in 8.9.3)
• and 11 more

Published 2024-09-10. Last modified 2026-06-17.