CVE-2024-43385
Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
- Record
CVE-2024-43385- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2024-40258
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
- Record
EUVD-2024-40258- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r53h-jp5f-7qxm
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due...
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
- Record
GHSA-r53h-jp5f-7qxm- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
NVD
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
- Record
CVE-2024-43385- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- phoenix contact fl mguard 2102
- phoenix contact fl mguard 2105
- phoenix contact fl mguard 4102 pci
- phoenix contact fl mguard 4102 pcie
- phoenix contact fl mguard 4302
- phoenix contact fl mguard 4305
- phoenix contact fl mguard centerport vpn-1000
- phoenix contact fl mguard core tx
- phoenix contact fl mguard core tx vpn
- phoenix contact fl mguard delta tx/tx
- phoenix contact fl mguard delta tx/tx vpn
- phoenix contact fl mguard gt/gt
Show 60 moreShow less
- phoenix contact fl mguard gt/gt vpn
- phoenix contact fl mguard pci4000
- phoenix contact fl mguard pci4000 vpn
- phoenix contact fl mguard pcie4000
- phoenix contact fl mguard pcie4000 vpn
- phoenix contact fl mguard rs2000 tx/tx vpn
- phoenix contact fl mguard rs2000 tx/tx-b
- phoenix contact fl mguard rs2005 tx vpn
- phoenix contact fl mguard rs4000 tx/tx
- phoenix contact fl mguard rs4000 tx/tx vpn
- phoenix contact fl mguard rs4000 tx/tx-m
- phoenix contact fl mguard rs4000 tx/tx-p
- phoenix contact fl mguard rs4004 tx/dtx
- phoenix contact fl mguard rs4004 tx/dtx vpn
- phoenix contact fl mguard smart2
- phoenix contact fl mguard smart2 vpn
- phoenix contact tc mguard rs2000 3g vpn
- phoenix contact tc mguard rs2000 4g att vpn
- phoenix contact tc mguard rs2000 4g vpn
- phoenix contact tc mguard rs2000 4g vzw vpn
- phoenix contact tc mguard rs4000 3g vpn
- phoenix contact tc mguard rs4000 4g att vpn
- phoenix contact tc mguard rs4000 4g vpn
- phoenix contact tc mguard rs4000 4g vzw vpn
- phoenixcontact fl mguard 2102 firmware
- phoenixcontact fl mguard 2105 firmware
- phoenixcontact fl mguard 4102 pci firmware
- phoenixcontact fl mguard 4102 pcie firmware
- phoenixcontact fl mguard 4302 firmware
- phoenixcontact fl mguard 4305 firmware
- phoenixcontact fl mguard centerport vpn-1000 firmware
- phoenixcontact fl mguard core tx firmware
- phoenixcontact fl mguard core tx vpn firmware
- phoenixcontact fl mguard delta tx\/tx firmware
- phoenixcontact fl mguard delta tx\/tx vpn firmware
- phoenixcontact fl mguard gt\/gt firmware
- phoenixcontact fl mguard gt\/gt vpn firmware
- phoenixcontact fl mguard pci4000 firmware
- phoenixcontact fl mguard pci4000 vpn firmware
- phoenixcontact fl mguard pcie4000 firmware
- phoenixcontact fl mguard pcie4000 vpn firmware
- phoenixcontact fl mguard rs2000 tx\/tx-b firmware
- phoenixcontact fl mguard rs2000 tx\/tx vpn firmware
- phoenixcontact fl mguard rs2005 tx vpn firmware
- phoenixcontact fl mguard rs4000 tx\/tx-m firmware
- phoenixcontact fl mguard rs4000 tx\/tx-p firmware
- phoenixcontact fl mguard rs4000 tx\/tx firmware
- phoenixcontact fl mguard rs4000 tx\/tx vpn firmware
- phoenixcontact fl mguard rs4004 tx\/dtx firmware
- phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware
- phoenixcontact fl mguard smart2 firmware
- phoenixcontact fl mguard smart2 vpn firmware
- phoenixcontact tc mguard rs2000 3g vpn firmware
- phoenixcontact tc mguard rs2000 4g att vpn firmware
- phoenixcontact tc mguard rs2000 4g vpn firmware
- phoenixcontact tc mguard rs2000 4g vzw vpn firmware
- phoenixcontact tc mguard rs4000 3g vpn firmware
- phoenixcontact tc mguard rs4000 4g att vpn firmware
- phoenixcontact tc mguard rs4000 4g vpn firmware
- phoenixcontact tc mguard rs4000 4g vzw vpn firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-43385 is a high vulnerability (CVSS 8.8) in Phoenix Contact Fl Mguard 2102, published September 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.74%, the 54th percentile. No source names a fixed version.