PT-2017-16353 · Phoenix Contact · Mguard

Published 2017-02-13 · Updated 2021-08-31 · CVE-2017-5159

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Phoenix Contact mGuard version 8.4.0

Description An issue was discovered where updating an mGuard device to version 8.4.0 via the update-upload facility resets the password of the admin user to its default value.

Recommendations For version 8.4.0, after updating, immediately change the admin user password from its default value to a secure password to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-99

Related Identifiers

CVE-2017-5159

Affected Products

Mguard

References · 4

• https://osv.dev/vulnerability/CVE-2017-5159 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5159 · Security Note
• http://securityfocus.com/bid/95648 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-017-01 · Note