Design/Logic Flaw

2022-11-1511:15:00

PRIOn knowledge base

www.prio-n.com

flaw

denial-of-service

remote attacker

phoenix contact

unauthenticated

https

firewall limits

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

JSON

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.

CPENameOperatorVersion
fl_mguard_centerport_firmwarelt8.9.0
fl_mguard_centerport_vpn-1000_firmwarelt8.9.0
fl_mguard_core_tx_firmwarelt8.9.0
fl_mguard_core_tx_vpn_firmwarelt8.9.0
fl_mguard_delta_tx\\/tx_firmwarelt8.9.0
fl_mguard_delta_tx\\/tx_vpn_firmwarelt8.9.0
fl_mguard_gt\\/gt_firmwarelt8.9.0
fl_mguard_gt\\/gt_vpn_firmwarelt8.9.0
fl_mguard_pci4000_firmwarelt8.9.0
fl_mguard_pci4000_vpn_firmwarelt8.9.0

Name	Operator	Version
fl_mguard_centerport_firmware	lt	8.9.0
fl_mguard_centerport_vpn-1000_firmware	lt	8.9.0
fl_mguard_core_tx_firmware	lt	8.9.0
fl_mguard_core_tx_vpn_firmware	lt	8.9.0
fl_mguard_delta_tx\\/tx_firmware	lt	8.9.0
fl_mguard_delta_tx\\/tx_vpn_firmware	lt	8.9.0
fl_mguard_gt\\/gt_firmware	lt	8.9.0
fl_mguard_gt\\/gt_vpn_firmware	lt	8.9.0
fl_mguard_pci4000_firmware	lt	8.9.0
fl_mguard_pci4000_vpn_firmware	lt	8.9.0

Rows per page:

1-10 of 311

References

cert.vde.com/en/advisories/VDE-2022-051/