cvelist/2024/43xxx/CVE-2024-43393.json

523 lines
24 KiB
JSON
Raw Normal View History

2024-08-12 09:00:36 +00:00
{
2024-09-10 09:00:34 +00:00
"data_version": "4.0",
2024-08-12 09:00:36 +00:00
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2024-43393",
2024-09-10 09:00:34 +00:00
"ASSIGNER": "info@cert.vde.com",
"STATE": "PUBLIC"
2024-08-12 09:00:36 +00:00
},
"description": {
"description_data": [
{
"lang": "eng",
2024-09-10 09:00:34 +00:00
"value": "A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')",
"cweId": "CWE-74"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "PHOENIX CONTACT",
"product": {
"product_data": [
{
"product_name": "FL MGUARD 2102",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "10.4.1"
}
]
}
},
{
"product_name": "FL MGUARD 2105",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "10.4.1"
}
]
}
},
{
"product_name": "FL MGUARD 4102 PCI",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "10.4.1"
}
]
}
},
{
"product_name": "FL MGUARD 4102 PCIE",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "10.4.1"
}
]
}
},
{
"product_name": "FL MGUARD 4302",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "10.4.1"
}
]
}
},
{
"product_name": "FL MGUARD 4305",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "10.4.1"
}
]
}
},
{
"product_name": "FL MGUARD CENTERPORT VPN-1000",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD CORE TX",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD CORE TX VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD DELTA TX/TX",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD DELTA TX/TX VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD GT/GT",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD GT/GT VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD PCI4000",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD PCI4000 VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD PCIE4000",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD PCIE4000 VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS2000 TX/TX-B",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS2000 TX/TX VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS2005 TX VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS4000 TX/TX",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS4000 TX/TX-M",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS4000 TX/TX-P",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS4000 TX/TX VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS4004 TX/DTX",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD RS4004 TX/DTX VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD SMART2",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "FL MGUARD SMART2 VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS2000 3G VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS2000 4G ATT VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS2000 4G VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS2000 4G VZW VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS4000 3G VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS4000 4G ATT VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS4000 4G VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
},
{
"product_name": "TC MGUARD RS4000 4G VZW VPN",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "8.9.3"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://cert.vde.com/en/advisories/VDE-2024-039",
"refsource": "MISC",
"name": "https://cert.vde.com/en/advisories/VDE-2024-039"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"advisory": "VDE-2024-039",
"defect": [
"CERT@VDE#641656"
],
"discovery": "UNKNOWN"
},
"credits": [
{
"lang": "en",
"value": "Andrea Palanca"
},
{
"lang": "en",
"value": "Nozomi Networks Security Research Team"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
2024-08-12 09:00:36 +00:00
}
]
}
}