FL MGUARD SMART2 vulnerabilities
9 known vulnerabilities in FL MGUARD SMART2 from Phoenix Contact. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
FL MGUARD 2102: Improper Control of Generation of Code
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RU
- 8.1 High severity
FL MGUARD 2102: Improper Control of Generation of Code
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP envir
- 8.1 High severity
FL MGUARD 2102: Improper Control of Generation of Code
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.
- 8.1 High severity
FL MGUARD 2102: Improper Control of Generation of Code
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.
- 8.1 High severity
FL MGUARD 2102: Improper Control of Generation of Code
A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.
- 8.8 High severity
FL MGUARD 2102: Improper Neutralization of Special Elements used in an OS Command
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.
- 8.8 High severity
FL MGUARD 2102: Improper Neutralization of Special Elements used in an OS Command
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.
- 8.8 High severity
FL MGUARD 2102: Improper Neutralization of Special Elements used in an OS Command
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
- 7.5 High severity
FL MGUARD CENTERPORT: Allocation of Resources Without Limits or Throttling
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewa