Authentication flaw

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

Denial of service

A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests...

CVE-2017-7937

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

CVE-2017-7935

A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests...

CVE-2017-7937

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

CVE-2017-7935

A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests...

CVE-2017-7935

A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests...

CVE-2017-7937

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

CVE-2017-7935

CVE-2017-7935 affects Phoenix Contact mGuard firmware versions 8.3.0–8.4.2. The root cause is a Resource Exhaustion issue where an attacker can degrade availability by sending multiple initial VPN requests. Impact is a loss of device availability; no confidentiality/integrity impact stated. Mitig...

CVE-2017-7937

Phoenix Contact mGuard firmware versions 8.3.0–8.4.2 are affected by two vulnerabilities: (1) Resource Exhaustion (CWE-400) enables disruption of device availability through multiple initial VPN requests; (2) Improper Authentication (CWE-287) could allow unauthorized access to the user firewall w...

CVE-2017-7937: Improper Authentication

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

CVE-2017-7935: Uncontrolled Resource Consumption

A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests...

PT-2017-18008

Name of the Vulnerable Software and Affected Versions Phoenix Contact GmbH mGuard versions 8.3.0 through 8.4.2 Description A Resource Exhaustion issue allows an attacker to compromise the device's availability by performing multiple initial VPN requests. Recommendations For versions 8.3.0 through...

PT-2017-18010

Name of the Vulnerable Software and Affected Versions Phoenix Contact GmbH mGuard versions 8.3.0 through 8.4.2 Description An issue with improper authentication was found, which could allow an attacker to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

PHOENIX CONTACT mGuard

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerabilities: Resource Exhaustion, Improper Authentication AFFECTED PRODUCTS The following versions of mGuard, a network device, are affected: mGuard firmware versions 8.3.0 to 8.4....

CVE-2017-5159

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value...

CVE-2017-5159

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value...

Default credentials

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value...

CVE-2017-5159

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value...

CVE-2017-5159

The CVE-2017-5159 issue affects Phoenix Contact mGuard devices updated to version 8.4.0. During the upgrade via the update-upload facility, the update succeeds but resets the admin password to its default, enabling potential unauthorized admin access. Exploitation details are not provided beyond ...