PT-2017-18010 · Phoenix Contact Gmbh · Mguard

Publicado 2017-05-19 · Atualizado 2019-10-09 · CVE-2017-7937

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Phoenix Contact GmbH mGuard versions 8.3.0 through 8.4.2

Description An issue with improper authentication was found, which could allow an attacker to gain unauthorized access to the user firewall when RADIUS servers are unreachable.

Recommendations For versions 8.3.0 through 8.4.2, update to a version that addresses the improper authentication issue to prevent unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-7937

Produtos afetados

Mguard

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7937 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7937 · Aviso do Fabricante