PT-2018-16958 · Phoenix Contact · Mguard

Publicado 2018-01-30 · Atualizado 2019-10-09 · CVE-2018-5441

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT mGuard versions 7.2 through 8.6.0

Description An issue with improper validation of integrity check values was found, which may allow an attacker to modify firmware update packages by bypassing the internal checksum verification. This could potentially compromise the integrity of the device.

Recommendations For versions 7.2 through 8.6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-354

CWE-20

Identificadores relacionados

CVE-2018-5441

Produtos afetados

Mguard

Referências · 5

• http://securityfocus.com/bid/102907 · Nota
• https://osv.dev/vulnerability/CVE-2018-5441 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5441 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01 · Nota
• https://cert.vde.com/en-us/advisories/vde-2018-001 · Correção