PT-2023-3649 · Phoenix Contact · Phoenix Contact Fl Mguard

Published 2023-06-13 · Updated 2024-10-02 · CVE-2023-2673

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL/TC MGUARD Family (affected versions not specified)

Description The issue is related to improper input validation, which may allow UDP packets to bypass filter rules and access the device behind the MGUARD, potentially leading to flooding attacks. This can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1287

CWE-20

Related Identifiers

BDU:2023-03933

CVE-2023-2673

Affected Products

Phoenix Contact Fl Mguard

References · 6

• https://osv.dev/vulnerability/CVE-2023-2673 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2673 · Security Note
• https://bdu.fstec.ru/vul/2023-03933 · Security Note
• https://t.me/cvenotify/57265 · Telegram Post
• https://cert.vde.com/en/advisories/VDE-2023-010 · Note
• https://vuldb.com/ru/?id.231302 · Note