Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-43386 Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.

🗓️ 10 Sep 2024 08:43:41Reported by CERTVDEType 
cvelist
 cvelist🔗 www.cve.org👁 23 Views

CVE-2024-43386 Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices. A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2024-43386
10 Sep 202411:43
–circl
CNNVD		PHOENIX CONTACT FL/TC MGUARD 安全漏洞
10 Sep 202400:00
–cnnvd
CVE		CVE-2024-43386
10 Sep 202408:43
–cve
EUVD		EUVD-2024-40259
3 Oct 202520:07
–euvd
NVD		CVE-2024-43386
10 Sep 202409:15
–nvd
OSV		CVE-2024-43386
10 Sep 202409:15
–osv
Positive Technologies		PT-2024-30546 · Mguard · Mguard
10 Sep 202400:00
–ptsecurity
RedhatCVE		CVE-2024-43386
5 Feb 202512:27
–redhatcve
Vulnrichment		CVE-2024-43386 Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.
10 Sep 202408:43
–vulnrichment
[
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 2102",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 2105",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4102 PCI",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4102 PCIE",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4302",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD 4305",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "10.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD CENTERPORT VPN-1000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD CORE TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD CORE TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD DELTA TX/TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD DELTA TX/TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD GT/GT",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD GT/GT VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCI4000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCI4000 VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCIE4000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD PCIE4000 VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS2000 TX/TX-B",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS2000 TX/TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS2005 TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX-M",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX-P",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4000 TX/TX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4004 TX/DTX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD RS4004 TX/DTX VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD SMART2",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FL MGUARD SMART2 VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 3G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 4G ATT VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 4G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS2000 4G VZW VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 3G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 4G ATT VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 4G VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TC MGUARD RS4000 4G VZW VPN",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "8.9.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
10 Sep 2024 08:43Current
CVSS 3.18.8
EPSS0.02456
CWE-78
os command executionemail_notification.tomguard devicesremote attackerarbitrary os commandsrootimproper neutralization.
23