PT-2022-6062 · Phoenix Contact · Fl Mguard+1

Published 2022-10-13 · Updated 2022-11-17 · CVE-2022-3480

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL MGUARD and TC MGUARD versions prior to 8.9.0

Description The issue is related to unlimited resource distribution in the management interface of PHOENIX CONTACT FL MGUARD and TC MGUARD devices. A remote, unauthenticated attacker could cause a denial-of-service by creating a large number of unauthenticated HTTPS connections from different source IP addresses. Configuring firewall limits for incoming connections cannot prevent the issue.

Recommendations For versions prior to 8.9.0, update to version 8.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the management interface to minimize the risk of exploitation. Restrict incoming HTTPS connections to trusted IP addresses to reduce the risk of denial-of-service attacks.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2022-07526

CVE-2022-3480

Affected Products

Fl Mguard

Tc Mguard

References · 7

• https://osv.dev/vulnerability/CVE-2022-3480 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3480 · Security Note
• https://bdu.fstec.ru/vul/2022-07526 · Security Note
• https://cert.vde.com/en/advisories/VDE-2022-051 · Note
• https://t.me/cibsecurity/52989 · Telegram Post
• https://t.me/cvenotify/37743 · Telegram Post
• https://vuldb.com/?id.213705 · Note