Phoenixcontact Fl Mguard 2102 Firmware vulnerabilities

13 CVEs affecting Phoenixcontact Fl Mguard 2102 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-43384, published 2026-05-07.

More from Phoenixcontact.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-7699, published 2024-09-10. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data.
• CVE-2024-43386, published 2024-09-10. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.
• CVE-2024-43385, published 2024-09-10. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
• CVE-2023-2673, published 2023-06-13. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the…
• CVE-2024-43388, published 2024-09-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.
• CVE-2024-43387, published 2024-09-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.
• CVE-2024-43393, published 2024-09-10. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP…
• CVE-2024-43391, published 2024-09-10. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the…
• CVE-2024-43390, published 2024-09-10. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.
• CVE-2024-43389, published 2024-09-10. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.

Latest

• CVE-2024-43384, published 2026-05-07. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
• CVE-2024-7698, published 2024-09-10. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.