ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-43387

—
CVSS 3.1
8.8 high
EPSS
<1%p45
Published
()
Modified
Description

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

Vendors
phoenixcontact
Products
tc mguard rs4000 4g vzw vpn firmware, tc mguard rs4000 4g vpn firmware, tc mguard rs4000 4g att vpn firmware, tc mguard rs4000 3g vpn firmware, tc mguard rs2000 4g vzw vpn firmware, tc mguard rs2000 4g vpn firmware, tc mguard rs2000 4g att vpn firmware, tc mguard rs2000 3g vpn firmware, fl mguard smart2 vpn firmware, fl mguard smart2 firmware, fl mguard rs4004 tx\/dtx vpn firmware, fl mguard rs4004 tx\/dtx firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

No ingested article mentions this CVE yet.