PT-2020-13156 · Phoenix Contact · Mguard

Smst Designers · Published 2020-12-17 · Updated 2020-12-21 · CVE-2020-12523

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Phoenix Contact mGuard Devices versions prior to 8.8.3

Description The issue concerns the functionality of LAN ports on Phoenix Contact mGuard Devices. Even if these ports are disabled in the device configuration, they become functional after a reboot. This behavior is observed in devices with an integrated switch on the LAN side, where single switch ports can be disabled through device configuration, but they still become functional after a reboot, independent of their configuration setting.

Recommendations For versions prior to 8.8.3, update to version 8.8.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-909

Related Identifiers

CVE-2020-12523

Affected Products

Mguard

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-12523 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12523 · Vendor Advisory
• https://t.me/cvenotify/7282 · Telegram Post
• https://cert.vde.com/en-us/advisories/vde-2020-046 · Note
• https://t.me/cvenotify/7442 · Telegram Post