Approved changes feed: RSS · Atom

cpe:2.3:o:phoenixcontact:fl_mguard_rs2005_tx_vpn_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductFl Mguard Rs2005 Tx Vpn Firmware (cfe7a43f-5412-5cec-8040-085cd98bb9d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7734 vulnerable 2026-06-08 06:58:23.312303 Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
MEDIUM (5.3)
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
Published: 2024-09-10T08:03:19.477Z
Updated: 2024-09-10T16:00:45.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7699 vulnerable 2026-06-08 06:58:23.157269 Phoenix Contact: OS command execution in MGUARD products
HIGH (8.8)
An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data.
Published: 2024-09-10T08:42:55.635Z
Updated: 2024-09-10T14:25:56.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7698 vulnerable 2026-06-08 06:58:23.121521 Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
MEDIUM (5.7)
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
Published: 2024-09-10T08:42:42.629Z
Updated: 2025-08-22T06:21:42.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43393 vulnerable 2026-06-08 06:45:50.455733 Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
HIGH (8.1)
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.
Published: 2024-09-10T08:45:10.306Z
Updated: 2025-08-22T06:32:56.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43392 vulnerable 2026-06-08 06:45:50.444819 Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices
HIGH (8.1)
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.
Published: 2024-09-10T08:44:56.166Z
Updated: 2025-08-22T06:32:27.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43391 vulnerable 2026-06-08 06:45:50.435509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43390 vulnerable 2026-06-08 06:45:50.421769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43389 vulnerable 2026-06-08 06:45:50.412776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43388 vulnerable 2026-06-08 06:45:50.390973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43387 vulnerable 2026-06-08 06:45:50.376040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43386 vulnerable 2026-06-08 06:45:50.367316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43385 vulnerable 2026-06-08 06:45:50.351503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43384 vulnerable 2026-06-08 06:45:50.319722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2673 vulnerable 2026-06-08 06:02:42.793324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3480 vulnerable 2026-06-08 05:48:21.217281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.