{"id":"CVE-2024-7698","aliases":["EUVD-2024-48581","GHSA-vq98-jh26-q3x7"],"status":"published","title":"Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products","description":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00407,"percentile":0.35277,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-201","CWE-212"],"published":"2024-09-10T08:42:42Z","modified":"2026-06-17T08:20:44Z","products":[{"vendor":"phoenix contact","product":"fl mguard 2102"},{"vendor":"phoenix contact","product":"fl mguard 2105"},{"vendor":"phoenix contact","product":"fl mguard 4102 pci"},{"vendor":"phoenix contact","product":"fl mguard 4102 pcie"},{"vendor":"phoenix contact","product":"fl mguard 4302"},{"vendor":"phoenix contact","product":"fl mguard 4305"},{"vendor":"phoenix contact","product":"fl mguard centerport vpn-1000"},{"vendor":"phoenix contact","product":"fl mguard core tx"},{"vendor":"phoenix contact","product":"fl mguard core tx vpn"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard gt/gt"},{"vendor":"phoenix contact","product":"fl mguard gt/gt vpn"},{"vendor":"phoenix contact","product":"fl mguard pci4000"},{"vendor":"phoenix contact","product":"fl mguard pci4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard pcie4000"},{"vendor":"phoenix contact","product":"fl mguard pcie4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx-b"},{"vendor":"phoenix contact","product":"fl mguard rs2005 tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-m"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-p"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx vpn"},{"vendor":"phoenix contact","product":"fl mguard smart2"},{"vendor":"phoenix contact","product":"fl mguard smart2 vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vzw vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vzw vpn"},{"vendor":"phoenixcontact","product":"fl_mguard_2102_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_2105_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pci_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pcie_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4302_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4305_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_centerport_vpn-1000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx-b_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2005_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-m_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-p_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vzw_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vzw_vpn_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2024-039","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7698"},{"url":"https://github.com/advisories/GHSA-vq98-jh26-q3x7"}],"sources":{"cve":[{"id":"CVE-2024-7698","title":"Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products","description":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.","status":"published","published":"2024-09-10T08:42:42.629Z","modified":"2025-08-22T06:21:42.084Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-48581","description":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.","status":"published","published":"2024-09-10T08:42:42Z","modified":"2025-08-22T06:21:42Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:54.537077Z"}],"ghsa":[{"id":"GHSA-vq98-jh26-q3x7","title":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which...","description":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.","status":"published","published":"2024-09-10T09:31:12Z","modified":"2025-08-22T09:31:42Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-201","CWE-212"],"updated_at":"2026-11-02T15:03:22.719724Z"}],"nvd":[{"id":"CVE-2024-7698","description":"A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.","status":"published","published":"2024-09-10T09:15:06.847Z","modified":"2026-06-17T08:20:44.78Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:10:25.561537Z"}]}}