Phoenixcontact: >> Tc Mguard Rs4000 4g Vpn Firmware >> 8.8.3 Security Vulnerabilities
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.
CVSS Score
8.8
EPSS Score
0.004
Published
2024-09-10
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
CVSS Score
5.3
EPSS Score
0.002
Published
2024-09-10
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.
CVSS Score
7.5
EPSS Score
0.005
Published
2022-11-15
Page 2