1. Home
  2. CVE Database
  3. CVE-2024-43386
HIGH · 8.8

CVE-2024-43386

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.

Vulnerability Description

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
PhoenixcontactTc Mguard Rs4000 4G Vzw Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4G Vzw Vpn-
PhoenixcontactTc Mguard Rs4000 4G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4G Vpn-
PhoenixcontactTc Mguard Rs4000 4G Att Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4G Att Vpn-
PhoenixcontactTc Mguard Rs4000 3G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 3G Vpn-
PhoenixcontactTc Mguard Rs2000 4G Vzw Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4G Vzw Vpn-
PhoenixcontactTc Mguard Rs2000 4G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4G Vpn-
PhoenixcontactTc Mguard Rs2000 4G Att Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4G Att Vpn-
PhoenixcontactTc Mguard Rs2000 3G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 3G Vpn-
PhoenixcontactFl Mguard Smart2 Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Smart2 Vpn-
PhoenixcontactFl Mguard Smart2 Firmware< 8.9.3
PhoenixcontactFl Mguard Smart2-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2024-43386?

CVE-2024-43386 is a vulnerability with a CVSS score of 8.8 (HIGH). A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.

How severe is CVE-2024-43386?

CVE-2024-43386 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-43386?

Check the references section above for vendor advisories and patch information. Affected products include: Phoenixcontact Tc Mguard Rs4000 4G Vzw Vpn Firmware, Phoenixcontact Tc Mguard Rs4000 4G Vzw Vpn, Phoenixcontact Tc Mguard Rs4000 4G Vpn Firmware, Phoenixcontact Tc Mguard Rs4000 4G Vpn, Phoenixcontact Tc Mguard Rs4000 4G Att Vpn Firmware.