Lucene search

K
nvd[email protected]NVD:CVE-2024-43393
HistorySep 10, 2024 - 9:15 a.m.

CVE-2024-43393

2024-09-1009:15:06
CWE-74
web.nvd.nist.gov
1
remote attacker
firewall services
configuration changes
dos
network access control
nat
cve-2024-43393

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

16.7%

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.

Affected configurations

Nvd
Node
phoenixcontacttc_mguard_rs4000_4g_vzw_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs4000_4g_vzw_vpnMatch-
Node
phoenixcontacttc_mguard_rs4000_4g_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs4000_4g_vpnMatch-
Node
phoenixcontacttc_mguard_rs4000_4g_att_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs4000_4g_att_vpnMatch-
Node
phoenixcontacttc_mguard_rs4000_3g_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs4000_3g_vpnMatch-
Node
phoenixcontacttc_mguard_rs2000_4g_vzw_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs2000_4g_vzw_vpnMatch-
Node
phoenixcontacttc_mguard_rs2000_4g_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs2000_4g_vpnMatch-
Node
phoenixcontacttc_mguard_rs2000_4g_att_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs2000_4g_att_vpnMatch-
Node
phoenixcontacttc_mguard_rs2000_3g_vpn_firmwareRange<8.9.3
AND
phoenixcontacttc_mguard_rs2000_3g_vpnMatch-
Node
phoenixcontactfl_mguard_smart2_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_smart2_vpnMatch-
Node
phoenixcontactfl_mguard_smart2_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_smart2Match-
Node
phoenixcontactfl_mguard_rs4004_tx\/dtx_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs4004_tx\/dtx_vpnMatch-
Node
phoenixcontactfl_mguard_rs4004_tx\/dtx_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs4004_tx\/dtxMatch-
Node
phoenixcontactfl_mguard_rs4000_tx\/tx_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs4000_tx\/tx_vpnMatch-
Node
phoenixcontactfl_mguard_rs4000_tx\/tx-p_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs4000_tx\/tx-pMatch-
Node
phoenixcontactfl_mguard_rs4000_tx\/tx-m_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs4000_tx\/tx-mMatch-
Node
phoenixcontactfl_mguard_rs4000_tx\/tx_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs4000_tx\/txMatch-
Node
phoenixcontactfl_mguard_rs2005_tx_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs2005_tx_vpnMatch-
Node
phoenixcontactfl_mguard_rs2000_tx\/tx_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs2000_tx\/tx_vpnMatch-
Node
phoenixcontactfl_mguard_rs2000_tx\/tx-b_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_rs2000_tx\/tx-bMatch-
Node
phoenixcontactfl_mguard_pcie4000_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_pcie4000_vpnMatch-
Node
phoenixcontactfl_mguard_pcie4000_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_pcie4000Match-
Node
phoenixcontactfl_mguard_pci4000_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_pci4000_vpnMatch-
Node
phoenixcontactfl_mguard_pci4000_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_pci4000Match-
Node
phoenixcontactfl_mguard_gt\/gt_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_gt\/gt_vpnMatch-
Node
phoenixcontactfl_mguard_gt\/gt_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_gt\/gtMatch-
Node
phoenixcontactfl_mguard_delta_tx\/tx_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_delta_tx\/tx_vpnMatch-
Node
phoenixcontactfl_mguard_delta_tx\/tx_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_delta_tx\/txMatch-
Node
phoenixcontactfl_mguard_core_tx_vpn_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_core_tx_vpnMatch-
Node
phoenixcontactfl_mguard_core_tx_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_core_txMatch-
Node
phoenixcontactfl_mguard_centerport_vpn-1000_firmwareRange<8.9.3
AND
phoenixcontactfl_mguard_centerport_vpn-1000Match-
Node
phoenixcontactfl_mguard_4305_firmwareRange<10.4.1
AND
phoenixcontactfl_mguard_4305Match-
Node
phoenixcontactfl_mguard_4302_firmwareRange<10.4.1
AND
phoenixcontactfl_mguard_4302Match-
Node
phoenixcontactfl_mguard_4102_pcie_firmwareRange<10.4.1
AND
phoenixcontactfl_mguard_4102_pcieMatch-
Node
phoenixcontactfl_mguard_4102_pci_firmwareRange<10.4.1
AND
phoenixcontactfl_mguard_4102_pciMatch-
Node
phoenixcontactfl_mguard_2105_firmwareRange<10.4.1
AND
phoenixcontactfl_mguard_2105Match-
Node
phoenixcontactfl_mguard_2102_firmwareRange<10.4.1
AND
phoenixcontactfl_mguard_2102Match-
VendorProductVersionCPE
phoenixcontacttc_mguard_rs4000_4g_vzw_vpn_firmware*cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_4g_vzw_vpn-cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn:-:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_4g_vpn_firmware*cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_4g_vpn-cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_vpn:-:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_4g_att_vpn_firmware*cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_att_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_4g_att_vpn-cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_4g_att_vpn:-:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_3g_vpn_firmware*cpe:2.3:o:phoenixcontact:tc_mguard_rs4000_3g_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs4000_3g_vpn-cpe:2.3:h:phoenixcontact:tc_mguard_rs4000_3g_vpn:-:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs2000_4g_vzw_vpn_firmware*cpe:2.3:o:phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontacttc_mguard_rs2000_4g_vzw_vpn-cpe:2.3:h:phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 721

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

16.7%

Related for NVD:CVE-2024-43393