Back to the CVE list
CVE-2024-43384

Vulnerability in Phoenixcontact Fl Mguard 2102 Firmware

CVSS score

8.0

EPSS probability

%0.3

Risk score

0.0

Published

5 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2024-43384 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2024-43384 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1phoenixcontactfl mguard 2102 firmware View
2phoenixcontactfl mguard 2102 View
3phoenixcontactfl mguard 2105 firmware View
4phoenixcontactfl mguard 2105 View
5phoenixcontactfl mguard 4102 pci firmware View
6phoenixcontactfl mguard 4102 pci View
7phoenixcontactfl mguard 4102 pcie firmware View
8phoenixcontactfl mguard 4102 pcie View
9phoenixcontactfl mguard 4302 firmware View
10phoenixcontactfl mguard 4302 View
11phoenixcontactfl mguard 4305 firmware View
12phoenixcontactfl mguard 4305 View
13phoenixcontactfl mguard centerport firmware View
14phoenixcontactfl mguard centerport View
15phoenixcontactfl mguard centerport vpn-1000 firmware View
16phoenixcontactfl mguard centerport vpn-1000 View
17phoenixcontactfl mguard core tx firmware View
18phoenixcontactfl mguard core tx View
19phoenixcontactfl mguard core tx vpn firmware View
20phoenixcontactfl mguard core tx vpn View
21phoenixcontactfl mguard delta tx/tx firmware View
22phoenixcontactfl mguard delta tx/tx View
23phoenixcontactfl mguard delta tx/tx vpn firmware View
24phoenixcontactfl mguard delta tx/tx vpn View
25phoenixcontactfl mguard gt/gt firmware View
26phoenixcontactfl mguard gt/gt View
27phoenixcontactfl mguard gt/gt vpn firmware View
28phoenixcontactfl mguard gt/gt vpn View
29phoenixcontactfl mguard pci4000 firmware View
30phoenixcontactfl mguard pci4000 View
31phoenixcontactfl mguard pci4000 vpn firmware View
32phoenixcontactfl mguard pci4000 vpn View
33phoenixcontactfl mguard pcie4000 firmware View
34phoenixcontactfl mguard pcie4000 View
35phoenixcontactfl mguard pcie4000 vpn firmware View
36phoenixcontactfl mguard pcie4000 vpn View
37phoenixcontactfl mguard rs2000 tx/tx vpn firmware View
38phoenixcontactfl mguard rs2000 tx/tx vpn View
39phoenixcontactfl mguard rs2000 tx/tx-b firmware View
40phoenixcontactfl mguard rs2000 tx/tx-b View
41phoenixcontactfl mguard rs2005 tx vpn firmware View
42phoenixcontactfl mguard rs2005 tx vpn View
43phoenixcontactfl mguard rs4000 tx/tx firmware View
44phoenixcontactfl mguard rs4000 tx/tx View
45phoenixcontactfl mguard rs4000 tx/tx vpn firmware View
46phoenixcontactfl mguard rs4000 tx/tx vpn View
47phoenixcontactfl mguard rs4000 tx/tx-m firmware View
48phoenixcontactfl mguard rs4000 tx/tx-m View
49phoenixcontactfl mguard rs4000 tx/tx-p firmware View
50phoenixcontactfl mguard rs4000 tx/tx-p View
51phoenixcontactfl mguard rs4004 tx/dtx firmware View
52phoenixcontactfl mguard rs4004 tx/dtx View
53phoenixcontactfl mguard rs4004 tx/dtx vpn firmware View
54phoenixcontactfl mguard rs4004 tx/dtx vpn View
55phoenixcontactfl mguard smart2 firmware View
56phoenixcontactfl mguard smart2 View
57phoenixcontactfl mguard smart2 vpn firmware View
58phoenixcontactfl mguard smart2 vpn View
59phoenixcontacttc mguard rs2000 3g vpn firmware View
60phoenixcontacttc mguard rs2000 3g vpn View
61phoenixcontacttc mguard rs2000 4g att vpn firmware View
62phoenixcontacttc mguard rs2000 4g att vpn View
63phoenixcontacttc mguard rs2000 4g vpn firmware View
64phoenixcontacttc mguard rs2000 4g vpn View
65phoenixcontacttc mguard rs2000 4g vzw vpn firmware View
66phoenixcontacttc mguard rs2000 4g vzw vpn View
67phoenixcontacttc mguard rs4000 3g vpn firmware View
68phoenixcontacttc mguard rs4000 3g vpn View
69phoenixcontacttc mguard rs4000 4g att vpn firmware View
70phoenixcontacttc mguard rs4000 4g att vpn View
71phoenixcontacttc mguard rs4000 4g vpn firmware View
72phoenixcontacttc mguard rs4000 4g vpn View
73phoenixcontacttc mguard rs4000 4g vzw vpn firmware View
74phoenixcontacttc mguard rs4000 4g vzw vpn View
Total affected vendors: 1|Products: 74

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.0CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-43384 is associated with the following CWEs:

CWE-212: Common Weakness Enumeration Entry CWE-212

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-43384 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsLow
UserGerekiyor

Official Sources and Advisories

https://certvde.com/en/advisories/VDE-2024-039nvd

CVSS Vector Radar Chart

8.0 / 10
Attack VectorNetworkComplexityLowPrivilegesLowUser Interact.RequiredConfidentialityLowIntegrityHighAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow privileges
User Interaction—
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)High
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

P
phoenixcontact logo
phoenixcontact

Weakness Type (CWE & CAPEC)

CWE-212

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-43384"
CVE-2024-43384 · Vulnerability in Phoenixcontact Fl Mguard…