cve/2024/CVE-2024-43391.md
2025-09-29 21:09:30 +02:00

53 lines
4.2 KiB
Markdown
Raw Permalink Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### [CVE-2024-43391](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43391)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%202102&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%202105&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%204102%20PCI&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%204102%20PCIE&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%204302&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%204305&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20CENTERPORT%20VPN-1000&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20CORE%20TX%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20CORE%20TX&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20DELTA%20TX%2FTX%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20DELTA%20TX%2FTX&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20GT%2FGT%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20GT%2FGT&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20PCI4000%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20PCI4000&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20PCIE4000%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20PCIE4000&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS2000%20TX%2FTX%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS2000%20TX%2FTX-B&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS2005%20TX%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS4000%20TX%2FTX%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS4000%20TX%2FTX&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS4000%20TX%2FTX-M&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS4000%20TX%2FTX-P&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS4004%20TX%2FDTX%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20RS4004%20TX%2FDTX&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20SMART2%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20MGUARD%20SMART2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS2000%203G%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS2000%204G%20ATT%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS2000%204G%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS2000%204G%20VZW%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS4000%203G%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS4000%204G%20ATT%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS4000%204G%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TC%20MGUARD%20RS4000%204G%20VZW%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')&color=brightgreen)
### Description
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds