ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-5441

—
CVSS 3.0
7.8 high
EPSS
<1%p21
Published
()
Modified
Description

An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.

Vendors
phoenixcontact
Products
mguard centerport firmware, mguard delta tx\/tx firmware, mguard delta tx\/tx vpn firmware, mguard gt\/gt firmware, mguard gt\/gt vpn firmware, mguard pci4000 vpn firmware, mguard pcie4000 vpn firmware, mguard rs2000 tx\/tx vpn firmware, mguard rs2000 tx\/tx-b firmware, mguard rs2005 tx vpn firmware, mguard rs4000 tx\/tx firmware, mguard rs4000 tx\/tx vpn firmware
Weakness
CWE-354, CWE-20
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.