PT-2024-30548 · Mguard · Mguard

Andrea Palanca · Published 2024-09-10 · Updated 2025-08-22 · CVE-2024-43388

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mGuard devices versions prior to firmware 8.9.3 or 10.4.1

Description A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. This issue allows hackers to access confidential data and escalate privileges.

Recommendations For mGuard devices versions prior to firmware 8.9.3 or 10.4.1, upgrade to firmware 8.9.3 or 10.4.1 or higher to resolve the issue. As a temporary workaround, consider restricting access to the SNMP service until the upgrade is applied.

Fix

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

CVE-2024-43388

Affected Products

Mguard

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2024-43388 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43388 · Vendor Advisory
• https://twitter.com/cracbot/status/1835196924988998005 · Twitter Post
• https://t.me/latest_high_impact_cve/1125 · Telegram Post
• https://twitter.com/cracbot/status/1834834562322682037 · Twitter Post
• https://t.me/cveNotify/133139 · Telegram Post
• https://twitter.com/CCBalert/status/1833811510147137995 · Twitter Post
• https://twitter.com/CveFindCom/status/1833430734289211698 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2024-039 · Note
• https://t.me/cvedetector/5196 · Telegram Post
• https://twitter.com/CVEnew/status/1833428045425676649 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1833460245248577757 · Twitter Post
• https://twitter.com/AegisLens/status/1833492304763527301 · Twitter Post