CVE-2024-7698
Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
- Record
CVE-2024-7698- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-201
- Updated
- 2026-11-02
EUVDEUVD-2024-48581
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
- Record
EUVD-2024-48581- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vq98-jh26-q3x7
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which...
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
- Record
GHSA-vq98-jh26-q3x7- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-201, CWE-212
- Updated
- 2026-11-02
NVD
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
- Record
CVE-2024-7698- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-201
- Updated
- 2026-11-02
Affected products
- phoenix contact fl mguard 2102
- phoenix contact fl mguard 2105
- phoenix contact fl mguard 4102 pci
- phoenix contact fl mguard 4102 pcie
- phoenix contact fl mguard 4302
- phoenix contact fl mguard 4305
- phoenix contact fl mguard centerport vpn-1000
- phoenix contact fl mguard core tx
- phoenix contact fl mguard core tx vpn
- phoenix contact fl mguard delta tx/tx
- phoenix contact fl mguard delta tx/tx vpn
- phoenix contact fl mguard gt/gt
Show 60 moreShow less
- phoenix contact fl mguard gt/gt vpn
- phoenix contact fl mguard pci4000
- phoenix contact fl mguard pci4000 vpn
- phoenix contact fl mguard pcie4000
- phoenix contact fl mguard pcie4000 vpn
- phoenix contact fl mguard rs2000 tx/tx vpn
- phoenix contact fl mguard rs2000 tx/tx-b
- phoenix contact fl mguard rs2005 tx vpn
- phoenix contact fl mguard rs4000 tx/tx
- phoenix contact fl mguard rs4000 tx/tx vpn
- phoenix contact fl mguard rs4000 tx/tx-m
- phoenix contact fl mguard rs4000 tx/tx-p
- phoenix contact fl mguard rs4004 tx/dtx
- phoenix contact fl mguard rs4004 tx/dtx vpn
- phoenix contact fl mguard smart2
- phoenix contact fl mguard smart2 vpn
- phoenix contact tc mguard rs2000 3g vpn
- phoenix contact tc mguard rs2000 4g att vpn
- phoenix contact tc mguard rs2000 4g vpn
- phoenix contact tc mguard rs2000 4g vzw vpn
- phoenix contact tc mguard rs4000 3g vpn
- phoenix contact tc mguard rs4000 4g att vpn
- phoenix contact tc mguard rs4000 4g vpn
- phoenix contact tc mguard rs4000 4g vzw vpn
- phoenixcontact fl mguard 2102 firmware
- phoenixcontact fl mguard 2105 firmware
- phoenixcontact fl mguard 4102 pci firmware
- phoenixcontact fl mguard 4102 pcie firmware
- phoenixcontact fl mguard 4302 firmware
- phoenixcontact fl mguard 4305 firmware
- phoenixcontact fl mguard centerport vpn-1000 firmware
- phoenixcontact fl mguard core tx firmware
- phoenixcontact fl mguard core tx vpn firmware
- phoenixcontact fl mguard delta tx\/tx firmware
- phoenixcontact fl mguard delta tx\/tx vpn firmware
- phoenixcontact fl mguard gt\/gt firmware
- phoenixcontact fl mguard gt\/gt vpn firmware
- phoenixcontact fl mguard pci4000 firmware
- phoenixcontact fl mguard pci4000 vpn firmware
- phoenixcontact fl mguard pcie4000 firmware
- phoenixcontact fl mguard pcie4000 vpn firmware
- phoenixcontact fl mguard rs2000 tx\/tx-b firmware
- phoenixcontact fl mguard rs2000 tx\/tx vpn firmware
- phoenixcontact fl mguard rs2005 tx vpn firmware
- phoenixcontact fl mguard rs4000 tx\/tx-m firmware
- phoenixcontact fl mguard rs4000 tx\/tx-p firmware
- phoenixcontact fl mguard rs4000 tx\/tx firmware
- phoenixcontact fl mguard rs4000 tx\/tx vpn firmware
- phoenixcontact fl mguard rs4004 tx\/dtx firmware
- phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware
- phoenixcontact fl mguard smart2 firmware
- phoenixcontact fl mguard smart2 vpn firmware
- phoenixcontact tc mguard rs2000 3g vpn firmware
- phoenixcontact tc mguard rs2000 4g att vpn firmware
- phoenixcontact tc mguard rs2000 4g vpn firmware
- phoenixcontact tc mguard rs2000 4g vzw vpn firmware
- phoenixcontact tc mguard rs4000 3g vpn firmware
- phoenixcontact tc mguard rs4000 4g att vpn firmware
- phoenixcontact tc mguard rs4000 4g vpn firmware
- phoenixcontact tc mguard rs4000 4g vzw vpn firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-7698 is a medium vulnerability (CVSS 5.7) in Phoenix Contact Fl Mguard 2102, published September 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.