CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-43385
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:fl_mguard_2102_firmware
- phoenixcontact:fl_mguard_2105_firmware
- phoenixcontact:fl_mguard_4102_pci_firmware
- phoenixcontact:fl_mguard_4102_pcie_firmware
- phoenixcontact:fl_mguard_4302_firmware
- phoenixcontact:fl_mguard_4305_firmware
- phoenixcontact:fl_mguard_centerport_vpn-1000_firmware
- phoenixcontact:fl_mguard_core_tx_firmware
- phoenixcontact:fl_mguard_core_tx_vpn_firmware
- phoenixcontact:fl_mguard_delta_tx\/tx_firmware
- phoenixcontact:fl_mguard_delta_tx\/tx_vpn_firmware
- phoenixcontact:fl_mguard_gt\/gt_firmware
- phoenixcontact:fl_mguard_gt\/gt_vpn_firmware
- phoenixcontact:fl_mguard_pci4000_firmware
- phoenixcontact:fl_mguard_pci4000_vpn_firmware
- phoenixcontact:fl_mguard_pcie4000_firmware
- phoenixcontact:fl_mguard_pcie4000_vpn_firmware
- phoenixcontact:fl_mguard_rs2000_tx\/tx-b_firmware
- phoenixcontact:fl_mguard_rs2000_tx\/tx_vpn_firmware
- phoenixcontact:fl_mguard_rs2005_tx_vpn_firmware
- phoenixcontact:fl_mguard_rs4000_tx\/tx-m_firmware
- phoenixcontact:fl_mguard_rs4000_tx\/tx-p_firmware
- phoenixcontact:fl_mguard_rs4000_tx\/tx_firmware
- phoenixcontact:fl_mguard_rs4000_tx\/tx_vpn_firmware
- phoenixcontact:fl_mguard_rs4004_tx\/dtx_firmware
- phoenixcontact:fl_mguard_rs4004_tx\/dtx_vpn_firmware
- phoenixcontact:fl_mguard_smart2_firmware
- phoenixcontact:fl_mguard_smart2_vpn_firmware
- phoenixcontact:tc_mguard_rs2000_3g_vpn_firmware
- phoenixcontact:tc_mguard_rs2000_4g_att_vpn_firmware
- phoenixcontact:tc_mguard_rs2000_4g_vpn_firmware
- phoenixcontact:tc_mguard_rs2000_4g_vzw_vpn_firmware
- phoenixcontact:tc_mguard_rs4000_3g_vpn_firmware
- phoenixcontact:tc_mguard_rs4000_4g_att_vpn_firmware
- phoenixcontact:tc_mguard_rs4000_4g_vpn_firmware
- phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn_firmware