{"id":"CVE-2024-7734","aliases":["EUVD-2024-48611","GHSA-rhjq-jm8v-8g8r"],"status":"published","title":"Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.","description":"An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00481,"percentile":0.41749,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2024-09-10T08:03:19Z","modified":"2026-06-17T08:20:48Z","products":[{"vendor":"phoenix contact","product":"fl mguard 2102"},{"vendor":"phoenix contact","product":"fl mguard 2105"},{"vendor":"phoenix contact","product":"fl mguard 4102 pci"},{"vendor":"phoenix contact","product":"fl mguard 4102 pcie"},{"vendor":"phoenix contact","product":"fl mguard 4302"},{"vendor":"phoenix contact","product":"fl mguard 4305"},{"vendor":"phoenix contact","product":"fl mguard centerport vpn-1000"},{"vendor":"phoenix contact","product":"fl mguard core tx"},{"vendor":"phoenix contact","product":"fl mguard core tx vpn"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard gt/gt"},{"vendor":"phoenix contact","product":"fl mguard gt/gt vpn"},{"vendor":"phoenix contact","product":"fl mguard pci4000"},{"vendor":"phoenix contact","product":"fl mguard pci4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard pcie4000"},{"vendor":"phoenix contact","product":"fl mguard pcie4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx-b"},{"vendor":"phoenix contact","product":"fl mguard rs2005 tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-m"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-p"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx vpn"},{"vendor":"phoenix contact","product":"fl mguard smart2"},{"vendor":"phoenix contact","product":"fl mguard smart2 vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vzw vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vzw vpn"},{"vendor":"phoenixcontact","product":"fl_mguard_2102_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_2105_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pci_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pcie_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4302_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4305_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_centerport_vpn-1000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx-b_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2005_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-m_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-p_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vzw_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vzw_vpn_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2024-052","tags":["Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7734"},{"url":"https://github.com/advisories/GHSA-rhjq-jm8v-8g8r"}],"sources":{"cve":[{"id":"CVE-2024-7734","title":"Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.","description":"An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.","status":"published","published":"2024-09-10T08:03:19.477Z","modified":"2024-09-10T16:00:45.691Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-48611","description":"An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.","status":"published","published":"2024-09-10T08:03:19Z","modified":"2024-09-10T16:00:45Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:55:59.274325Z"}],"ghsa":[{"id":"GHSA-rhjq-jm8v-8g8r","title":"An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation...","description":"An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.","status":"published","published":"2024-09-10T09:31:11Z","modified":"2024-09-10T09:31:19Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:58:13.090684Z"}],"nvd":[{"id":"CVE-2024-7734","description":"An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.","status":"published","published":"2024-09-10T08:15:04.02Z","modified":"2026-06-17T08:20:48.857Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:10:25.561537Z"}]}}