ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-43392

—
CVSS 3.1
8.1 high
EPSS
<1%p42
Published
()
Modified
Description

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.

Vendors
phoenixcontact
Products
tc mguard rs4000 4g vzw vpn firmware, tc mguard rs4000 4g vpn firmware, tc mguard rs4000 4g att vpn firmware, tc mguard rs4000 3g vpn firmware, tc mguard rs2000 4g vzw vpn firmware, tc mguard rs2000 4g vpn firmware, tc mguard rs2000 4g att vpn firmware, tc mguard rs2000 3g vpn firmware, fl mguard smart2 vpn firmware, fl mguard smart2 firmware, fl mguard rs4004 tx\/dtx vpn firmware, fl mguard rs4004 tx\/dtx firmware
Weakness
CWE-94
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.