{"id":"CVE-2024-43385","aliases":["EUVD-2024-40258","GHSA-r53h-jp5f-7qxm"],"status":"published","title":"Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices","description":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0074,"percentile":0.54901,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-09-10T08:43:25Z","modified":"2026-06-17T07:50:55Z","products":[{"vendor":"phoenix contact","product":"fl mguard 2102"},{"vendor":"phoenix contact","product":"fl mguard 2105"},{"vendor":"phoenix contact","product":"fl mguard 4102 pci"},{"vendor":"phoenix contact","product":"fl mguard 4102 pcie"},{"vendor":"phoenix contact","product":"fl mguard 4302"},{"vendor":"phoenix contact","product":"fl mguard 4305"},{"vendor":"phoenix contact","product":"fl mguard centerport vpn-1000"},{"vendor":"phoenix contact","product":"fl mguard core tx"},{"vendor":"phoenix contact","product":"fl mguard core tx vpn"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard gt/gt"},{"vendor":"phoenix contact","product":"fl mguard gt/gt vpn"},{"vendor":"phoenix contact","product":"fl mguard pci4000"},{"vendor":"phoenix contact","product":"fl mguard pci4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard pcie4000"},{"vendor":"phoenix contact","product":"fl mguard pcie4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx-b"},{"vendor":"phoenix contact","product":"fl mguard rs2005 tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-m"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-p"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx vpn"},{"vendor":"phoenix contact","product":"fl mguard smart2"},{"vendor":"phoenix contact","product":"fl mguard smart2 vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vzw vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vzw vpn"},{"vendor":"phoenixcontact","product":"fl_mguard_2102_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_2105_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pci_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pcie_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4302_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4305_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_centerport_vpn-1000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx-b_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2005_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-m_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-p_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vzw_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vzw_vpn_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2024-039","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43385"},{"url":"https://github.com/advisories/GHSA-r53h-jp5f-7qxm"}],"sources":{"cve":[{"id":"CVE-2024-43385","title":"Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices","description":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.","status":"published","published":"2024-09-10T08:43:25.556Z","modified":"2024-09-10T14:25:30.32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:33:58.839967Z"}],"euvd":[{"id":"EUVD-2024-40258","description":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.","status":"published","published":"2024-09-10T08:43:25Z","modified":"2024-09-10T14:25:30Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:59.818548Z"}],"ghsa":[{"id":"GHSA-r53h-jp5f-7qxm","title":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due...","description":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.","status":"published","published":"2024-09-10T09:31:12Z","modified":"2024-09-10T09:31:19Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:58:13.090684Z"}],"nvd":[{"id":"CVE-2024-43385","description":"A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.","status":"published","published":"2024-09-10T09:15:04.15Z","modified":"2026-06-17T07:50:55.773Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:10:25.561537Z"}]}}