Medium severity · published Jun 13, 2023
CVE-2023-2673
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely…
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FM
FL Mguard 2102 Firmware · Phoenixcontact
through 10.1.1 · source: NVD
FM
FL Mguard 4102 Pci Firmware · Phoenixcontact
through 10.1.1 · source: NVD
FM
FL Mguard 4102 Pcie Firmware · Phoenixcontact
through 10.1.1 · source: NVD
FM
FL Mguard 4302 Firmware · Phoenixcontact
through 10.1.1 · source: NVD
FM
FL Mguard Centerport Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Centerport Vpn-1000 Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Core TX Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Core TX Vpn Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Delta Tx/tx Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Delta Tx/tx Vpn Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Gt/gt Firmware · Phoenixcontact
through 8.9.0 · source: NVD
FM
FL Mguard Gt/gt Vpn Firmware · Phoenixcontact
through 8.9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-2673
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-2673
Mitigation
https://cert.vde.com/en/advisories/VDE-2023-010/
More from FL Mguard 2102 Firmware
8.8
CVE-2024-43388
Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices
8.8
CVE-2024-43387
Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices
8.8
CVE-2024-43386
Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.
8.8
CVE-2024-43385
Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
8.8
CVE-2024-7699
Phoenix Contact: OS command execution in MGUARD products