{"id":"CVE-2024-43390","aliases":["EUVD-2024-40263","GHSA-vw69-gxfr-pfgr"],"status":"published","title":"Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices","description":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00519,"percentile":0.44321,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-74","CWE-94"],"published":"2024-09-10T08:44:30Z","modified":"2026-06-17T07:50:56Z","products":[{"vendor":"phoenix contact","product":"fl mguard 2102"},{"vendor":"phoenix contact","product":"fl mguard 2105"},{"vendor":"phoenix contact","product":"fl mguard 4102 pci"},{"vendor":"phoenix contact","product":"fl mguard 4102 pcie"},{"vendor":"phoenix contact","product":"fl mguard 4302"},{"vendor":"phoenix contact","product":"fl mguard 4305"},{"vendor":"phoenix contact","product":"fl mguard centerport vpn-1000"},{"vendor":"phoenix contact","product":"fl mguard core tx"},{"vendor":"phoenix contact","product":"fl mguard core tx vpn"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard gt/gt"},{"vendor":"phoenix contact","product":"fl mguard gt/gt vpn"},{"vendor":"phoenix contact","product":"fl mguard pci4000"},{"vendor":"phoenix contact","product":"fl mguard pci4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard pcie4000"},{"vendor":"phoenix contact","product":"fl mguard pcie4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx-b"},{"vendor":"phoenix contact","product":"fl mguard rs2005 tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-m"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-p"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx vpn"},{"vendor":"phoenix contact","product":"fl mguard smart2"},{"vendor":"phoenix contact","product":"fl mguard smart2 vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vzw vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vzw vpn"},{"vendor":"phoenixcontact","product":"fl_mguard_2102_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_2105_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pci_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pcie_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4302_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4305_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_centerport_vpn-1000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx-b_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2005_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-m_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-p_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vzw_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vzw_vpn_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2024-039","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43390"},{"url":"https://github.com/advisories/GHSA-vw69-gxfr-pfgr"}],"sources":{"cve":[{"id":"CVE-2024-43390","title":"Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices","description":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.","status":"published","published":"2024-09-10T08:44:30.792Z","modified":"2025-08-22T06:23:31.974Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:33:58.839967Z"}],"euvd":[{"id":"EUVD-2024-40263","description":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.","status":"published","published":"2024-09-10T08:44:30Z","modified":"2025-08-22T06:23:31Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:54.537077Z"}],"ghsa":[{"id":"GHSA-vw69-gxfr-pfgr","title":"A low privileged remote attacker can perform configuration changes of the firewall services,...","description":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.","status":"published","published":"2024-09-10T09:31:12Z","modified":"2025-08-22T09:31:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-74","CWE-94"],"updated_at":"2026-11-02T15:03:22.719724Z"}],"nvd":[{"id":"CVE-2024-43390","description":"A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.","status":"published","published":"2024-09-10T09:15:05.537Z","modified":"2026-06-17T07:50:56.933Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:25.561537Z"}]}}