Strix
26.1K

CVE-2024-43393

HIGHCVSS 8.1/10EPSS 0.52%

Last modified

CVE-2024-43393 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.. EPSS estimates a 0.52% chance of exploitation in the next 30 days.

Description

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.

Metrics

CVSS 3.1
8.1/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS Probability
0.52%

40.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
PhoenixcontactTc Mguard Rs4000 4g Vzw Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4g Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4g Att Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 3g Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4g Vzw Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4g Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4g Att Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 3g Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Smart2 Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Smart2 Firmware< 8.9.3
PhoenixcontactFl Mguard Rs4004 Tx\/Dtx Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Rs4004 Tx\/Dtx Firmware< 8.9.3
PhoenixcontactFl Mguard Rs4000 Tx\/Tx Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Rs4000 Tx\/Tx-P Firmware< 8.9.3
PhoenixcontactFl Mguard Rs4000 Tx\/Tx-M Firmware< 8.9.3
PhoenixcontactFl Mguard Rs4000 Tx\/Tx Firmware< 8.9.3
PhoenixcontactFl Mguard Rs2005 Tx Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Rs2000 Tx\/Tx Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Rs2000 Tx\/Tx-B Firmware< 8.9.3
PhoenixcontactFl Mguard Pcie4000 Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Pcie4000 Firmware< 8.9.3
PhoenixcontactFl Mguard Pci4000 Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Pci4000 Firmware< 8.9.3
PhoenixcontactFl Mguard Gt\/Gt Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Gt\/Gt Firmware< 8.9.3
PhoenixcontactFl Mguard Delta Tx\/Tx Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Delta Tx\/Tx Firmware< 8.9.3
PhoenixcontactFl Mguard Core Tx Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Core Tx Firmware< 8.9.3
PhoenixcontactFl Mguard Centerport Vpn-1000 Firmware< 8.9.3
PhoenixcontactFl Mguard 4305 Firmware< 10.4.1
PhoenixcontactFl Mguard 4302 Firmware< 10.4.1
PhoenixcontactFl Mguard 4102 Pcie Firmware< 10.4.1
PhoenixcontactFl Mguard 4102 Pci Firmware< 10.4.1
PhoenixcontactFl Mguard 2105 Firmware< 10.4.1
PhoenixcontactFl Mguard 2102 Firmware< 10.4.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2024-43393?
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.
How severe is CVE-2024-43393?
CVE-2024-43393 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 0.52% probability of exploitation in the next 30 days.
How do I fix CVE-2024-43393?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-43393?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST