CVE-2020-12523
Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource
- Record
CVE-2020-12523- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-909
- Updated
- 2026-11-02
EUVDEUVD-2020-4825
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource
- Record
EUVD-2020-4825- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwfg-74jc-wgx8 No score
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot...
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource
- Record
GHSA-fwfg-74jc-wgx8- Weakness
- CWE-909
- Updated
- 2026-11-02
NVD
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource
- Record
CVE-2020-12523- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:P - Weakness
- CWE-909
- Updated
- 2026-11-02
Affected products
- innominate mguard rs4000 4tx/3g/tx vpn
- innominate mguard rs4000 4tx/tx
- innominate mguard rs4000 4tx/tx vpn
- phoenix contact fl mguard rs4004 tx/dtx (2701876)
- phoenix contact fl mguard rs4004 tx/dtx vpn (2701877)
- phoenix contact tc mguard rs4000 3g vpn (2903440)
- phoenix contact tc mguard rs4000 4g att vpn (1010463)
- phoenix contact tc mguard rs4000 4g vpn (2903586)
- phoenix contact tc mguard rs4000 4g vzw vpn (1010461)
- phoenixcontact fl mguard rs4004 tx\/dtx firmware
- phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware
- phoenixcontact innominate mguard rs4000 4tx\/3g\/tx vpn firmware
Show 6 moreShow less
- phoenixcontact innominate mguard rs4000 4tx\/tx firmware
- phoenixcontact innominate mguard rs4000 4tx\/tx vpn firmware
- phoenixcontact tc mguard rs4000 3g vpn firmware
- phoenixcontact tc mguard rs4000 4g att vpn firmware
- phoenixcontact tc mguard rs4000 4g vpn firmware
- phoenixcontact tc mguard rs4000 4g vzw vpn firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-12523 is a medium vulnerability (CVSS 5.4) in Innominate Mguard Rs4000 4tx/3g/tx Vpn, published December 17, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. No source names a fixed version.