← Database
CVE-2024-43385
HIGH
CVSS: 8.8
Published: 2024-09-10
Modified: 2026-06-17
Description
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
Affected Platforms
Phoenixcontact Fl Mguard 2105Phoenixcontact Fl Mguard Smart2Phoenixcontact Fl Mguard Rs4004 Tx\/Dtx Vpn FirmwarePhoenixcontact Tc Mguard Rs4000 4G Vpn FirmwarePhoenixcontact Fl Mguard Rs4000 Tx\/Tx Vpn FirmwarePhoenixcontact Fl Mguard Delta Tx\/Tx FirmwarePhoenixcontact Fl Mguard Core TxPhoenixcontact Fl Mguard Rs4000 Tx\/TxPhoenixcontact Fl Mguard Delta Tx\/TxPhoenixcontact Fl Mguard Pcie4000 Vpn Firmware