1. Home
  2. CVE Database
  3. CVE-2024-43387
HIGH · 8.8

CVE-2024-43387

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

Vulnerability Description

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
PhoenixcontactTc Mguard Rs4000 4G Vzw Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4G Vzw Vpn-
PhoenixcontactTc Mguard Rs4000 4G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4G Vpn-
PhoenixcontactTc Mguard Rs4000 4G Att Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 4G Att Vpn-
PhoenixcontactTc Mguard Rs4000 3G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs4000 3G Vpn-
PhoenixcontactTc Mguard Rs2000 4G Vzw Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4G Vzw Vpn-
PhoenixcontactTc Mguard Rs2000 4G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4G Vpn-
PhoenixcontactTc Mguard Rs2000 4G Att Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 4G Att Vpn-
PhoenixcontactTc Mguard Rs2000 3G Vpn Firmware< 8.9.3
PhoenixcontactTc Mguard Rs2000 3G Vpn-
PhoenixcontactFl Mguard Smart2 Vpn Firmware< 8.9.3
PhoenixcontactFl Mguard Smart2 Vpn-
PhoenixcontactFl Mguard Smart2 Firmware< 8.9.3
PhoenixcontactFl Mguard Smart2-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2024-43387?

CVE-2024-43387 is a vulnerability with a CVSS score of 8.8 (HIGH). A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.

How severe is CVE-2024-43387?

CVE-2024-43387 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-43387?

Check the references section above for vendor advisories and patch information. Affected products include: Phoenixcontact Tc Mguard Rs4000 4G Vzw Vpn Firmware, Phoenixcontact Tc Mguard Rs4000 4G Vzw Vpn, Phoenixcontact Tc Mguard Rs4000 4G Vpn Firmware, Phoenixcontact Tc Mguard Rs4000 4G Vpn, Phoenixcontact Tc Mguard Rs4000 4G Att Vpn Firmware.