PT-2017-18010 · Phoenix Contact Gmbh · Mguard

Published 2017-05-19 · Updated 2019-10-09 · CVE-2017-7937

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Phoenix Contact GmbH mGuard versions 8.3.0 through 8.4.2

Description An issue with improper authentication was found, which could allow an attacker to gain unauthorized access to the user firewall when RADIUS servers are unreachable.

Recommendations For versions 8.3.0 through 8.4.2, update to a version that addresses the improper authentication issue to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-7937

Affected Products

Mguard

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-7937 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7937 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01 · Note