ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-43385

—
CVSS 3.1
8.8 high
EPSS
<1%p52
Published
()
Modified
Description

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.

Vendors
phoenixcontact
Products
tc mguard rs4000 4g vzw vpn firmware, tc mguard rs4000 4g vpn firmware, tc mguard rs4000 4g att vpn firmware, tc mguard rs4000 3g vpn firmware, tc mguard rs2000 4g vzw vpn firmware, tc mguard rs2000 4g vpn firmware, tc mguard rs2000 4g att vpn firmware, tc mguard rs2000 3g vpn firmware, fl mguard smart2 vpn firmware, fl mguard smart2 firmware, fl mguard rs4004 tx\/dtx vpn firmware, fl mguard rs4004 tx\/dtx firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

No ingested article mentions this CVE yet.