CVE-2024-7698

Sept. 27, 2024, 7:39 p.m.

CVSS Score

5.7 / 10

Products Impacted

Vendor	Product	Versions
phoenixcontact	tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vzw_vpn tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_vpn tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_4g_att_vpn tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs4000_3g_vpn tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn tc_mguard_rs2000_4g_vpn_firmware tc_mguard_rs2000_4g_vpn tc_mguard_rs2000_4g_att_vpn_firmware tc_mguard_rs2000_4g_att_vpn tc_mguard_rs2000_3g_vpn_firmware tc_mguard_rs2000_3g_vpn fl_mguard_smart2_vpn_firmware fl_mguard_smart2_vpn fl_mguard_smart2_firmware fl_mguard_smart2 fl_mguard_rs4004_tx\/dtx_vpn_firmware fl_mguard_rs4004_tx\/dtx_vpn fl_mguard_rs4004_tx\/dtx_firmware fl_mguard_rs4004_tx\/dtx fl_mguard_rs4000_tx\/tx_vpn_firmware fl_mguard_rs4000_tx\/tx_vpn fl_mguard_rs4000_tx\/tx-p_firmware fl_mguard_rs4000_tx\/tx-p fl_mguard_rs4000_tx\/tx-m_firmware fl_mguard_rs4000_tx\/tx-m fl_mguard_rs4000_tx\/tx_firmware fl_mguard_rs4000_tx\/tx fl_mguard_rs2005_tx_vpn_firmware fl_mguard_rs2005_tx_vpn fl_mguard_rs2000_tx\/tx_vpn_firmware fl_mguard_rs2000_tx\/tx_vpn fl_mguard_rs2000_tx\/tx-b_firmware fl_mguard_rs2000_tx\/tx-b fl_mguard_pcie4000_vpn_firmware fl_mguard_pcie4000_vpn fl_mguard_pcie4000_firmware fl_mguard_pcie4000 fl_mguard_pci4000_vpn_firmware fl_mguard_pci4000_vpn fl_mguard_pci4000_firmware fl_mguard_pci4000 fl_mguard_gt\/gt_vpn_firmware fl_mguard_gt\/gt_vpn fl_mguard_gt\/gt_firmware fl_mguard_gt\/gt fl_mguard_delta_tx\/tx_vpn_firmware fl_mguard_delta_tx\/tx_vpn fl_mguard_delta_tx\/tx_firmware fl_mguard_delta_tx\/tx fl_mguard_core_tx_vpn_firmware fl_mguard_core_tx_vpn fl_mguard_core_tx_firmware fl_mguard_core_tx fl_mguard_centerport_vpn-1000_firmware fl_mguard_centerport_vpn-1000 fl_mguard_4305_firmware fl_mguard_4305 fl_mguard_4302_firmware fl_mguard_4302 fl_mguard_4102_pcie_firmware fl_mguard_4102_pcie fl_mguard_4102_pci_firmware fl_mguard_4102_pci fl_mguard_2105_firmware fl_mguard_2105 fl_mguard_2102_firmware fl_mguard_2102	* - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * -

Description

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

Weaknesses

CWE-212

Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

CWE ID: 212

Date

Published: Sept. 10, 2024, 9:15 a.m.

Last Modified: Sept. 27, 2024, 7:39 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

info@cert.vde.com

CPEs

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	phoenixcontact	tc_mguard_rs4000_4g_vzw_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs4000_4g_vzw_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs4000_4g_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs4000_4g_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs4000_4g_att_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs4000_4g_att_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs4000_3g_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs4000_3g_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs2000_4g_vzw_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs2000_4g_vzw_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs2000_4g_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs2000_4g_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs2000_4g_att_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs2000_4g_att_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	tc_mguard_rs2000_3g_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	tc_mguard_rs2000_3g_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_smart2_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_smart2_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_smart2_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_smart2	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs4004_tx\/dtx_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs4004_tx\/dtx_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs4004_tx\/dtx_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs4004_tx\/dtx	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs4000_tx\/tx_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs4000_tx\/tx_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs4000_tx\/tx-p_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs4000_tx\/tx-p	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs4000_tx\/tx-m_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs4000_tx\/tx-m	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs4000_tx\/tx_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs4000_tx\/tx	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs2005_tx_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs2005_tx_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs2000_tx\/tx_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs2000_tx\/tx_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_rs2000_tx\/tx-b_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_rs2000_tx\/tx-b	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_pcie4000_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_pcie4000_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_pcie4000_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_pcie4000	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_pci4000_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_pci4000_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_pci4000_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_pci4000	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_gt\/gt_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_gt\/gt_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_gt\/gt_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_gt\/gt	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_delta_tx\/tx_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_delta_tx\/tx_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_delta_tx\/tx_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_delta_tx\/tx	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_core_tx_vpn_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_core_tx_vpn	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_core_tx_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_core_tx	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_centerport_vpn-1000_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_centerport_vpn-1000	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_4305_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_4305	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_4302_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_4302	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_4102_pcie_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_4102_pcie	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_4102_pci_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_4102_pci	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_2105_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_2105	-	/	/	/	/	/	/	/
o	phoenixcontact	fl_mguard_2102_firmware	/	/	/	/	/	/	/	/
h	phoenixcontact	fl_mguard_2102	-	/	/	/	/	/	/	/

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

Base Score

5.7

Exploitability Score

2.1

Impact Score

3.6

Base Severity

MEDIUM

CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

References

https://cert.vde.com/ info@cert.vde.com