PT-2024-38519 · Phoenix Contact · Fl Mguard 2102+46

Andrea Palanca · Published 2024-09-10 · Updated 2024-09-27 · CVE-2024-7699

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A low-privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-7699

Affected Products

Fl Mguard 2102

Fl Mguard 2105

Fl Mguard 4102 Pci

Fl Mguard 4302

Fl Mguard 4305

Fl Mguard Centerport Vpn-1000

Fl Mguard Core Tx

Fl Mguard Core Tx Vpn

Fl Mguard Delta Tx/Tx

Fl Mguard Gt/Gt

Fl Mguard Gt/Gt Vpn

Fl Mguard Pci4000

Fl Mguard Pci4000 Vpn

Fl Mguard Rs2000 Tx/Tx Vpn

Fl Mguard Rs2000 Tx/Tx-B

Fl Mguard Rs2005 Tx Vpn

Fl Mguard Rs4000 Tx/Tx

Fl Mguard Rs4004 Tx/Dtx

Fl Mguard Smart2

Fl Mguard Smart2 Vpn

Tc Mguard Rs2000 3G Vpn

Tc Mguard Rs2000 4G Vpn

Tc Mguard Rs2000 4G Vzw Vpn

Tc Mguard Rs4000 3G Vpn

Tc Mguard Rs4000 4G Att Vpn

Tc Mguard Rs4000 4G Vpn

Fl Mguard 2102 Firmware

Fl Mguard 2105 Firmware

Fl Mguard 4102 Pcie Firmware

Fl Mguard 4302 Firmware

Fl Mguard 4305 Firmware

Fl Mguard Centerport Vpn-1000 Firmware

Fl Mguard Core Tx Firmware

Fl Mguard Delta Tx/Tx Firmware

Fl Mguard Gt/Gt Firmware

Fl Mguard Pci4000 Firmware

Fl Mguard Rs2000 Tx/Tx-B Firmware

Fl Mguard Rs2000 Tx/Tx Vpn Firmware

Fl Mguard Rs2005 Tx Vpn Firmware

Fl Mguard Rs4000 Tx/Tx Firmware

Fl Mguard Rs4004 Tx/Dtx Firmware

Fl Mguard Smart2 Firmware

Tc Mguard Rs2000 3G Vpn Firmware

Tc Mguard Rs2000 4G Vpn Firmware

Tc Mguard Rs4000 3G Vpn Firmware

Tc Mguard Rs4000 4G Att Vpn Firmware

Tc Mguard Rs4000 4G Vpn Firmware

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2024-7699 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7699 · Vendor Advisory
• https://twitter.com/AegisLens/status/1833464600861323641 · Twitter Post
• https://twitter.com/CVEnew/status/1833428050387616127 · Twitter Post
• https://t.me/cvedetector/5186 · Telegram Post
• https://twitter.com/cracbot/status/1835196926524113379 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2024-039 · Note
• https://twitter.com/VulmonFeeds/status/1833467054424203489 · Twitter Post
• https://twitter.com/CveFindCom/status/1833430679389929817 · Twitter Post
• https://t.me/latest_high_impact_cve/1128 · Telegram Post
• https://twitter.com/cracbot/status/1834834563920805967 · Twitter Post
• https://t.me/cvenotify/96420 · Telegram Post