Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-7734

Sept. 28, 2024, 11:56 p.m.

CVSS Score

5.3 / 10

Products Impacted

Vendor Product Versions
phoenixcontact
  • tc_mguard_rs4000_4g_vzw_vpn_firmware
  • tc_mguard_rs4000_4g_vzw_vpn
  • tc_mguard_rs4000_4g_vpn_firmware
  • tc_mguard_rs4000_4g_vpn
  • tc_mguard_rs4000_4g_att_vpn_firmware
  • tc_mguard_rs4000_4g_att_vpn
  • tc_mguard_rs4000_3g_vpn_firmware
  • tc_mguard_rs4000_3g_vpn
  • tc_mguard_rs2000_4g_vzw_vpn_firmware
  • tc_mguard_rs2000_4g_vzw_vpn
  • tc_mguard_rs2000_4g_vpn_firmware
  • tc_mguard_rs2000_4g_vpn
  • tc_mguard_rs2000_4g_att_vpn_firmware
  • tc_mguard_rs2000_4g_att_vpn
  • tc_mguard_rs2000_3g_vpn_firmware
  • tc_mguard_rs2000_3g_vpn
  • fl_mguard_smart2_vpn_firmware
  • fl_mguard_smart2_vpn
  • fl_mguard_smart2_firmware
  • fl_mguard_smart2
  • fl_mguard_rs4004_tx\/dtx_vpn_firmware
  • fl_mguard_rs4004_tx\/dtx_vpn
  • fl_mguard_rs4004_tx\/dtx_firmware
  • fl_mguard_rs4004_tx\/dtx
  • fl_mguard_rs4000_tx\/tx_vpn_firmware
  • fl_mguard_rs4000_tx\/tx_vpn
  • fl_mguard_rs4000_tx\/tx-p_firmware
  • fl_mguard_rs4000_tx\/tx-p
  • fl_mguard_rs4000_tx\/tx-m_firmware
  • fl_mguard_rs4000_tx\/tx-m
  • fl_mguard_rs4000_tx\/tx_firmware
  • fl_mguard_rs4000_tx\/tx
  • fl_mguard_rs2005_tx_vpn_firmware
  • fl_mguard_rs2005_tx_vpn
  • fl_mguard_rs2000_tx\/tx_vpn_firmware
  • fl_mguard_rs2000_tx\/tx_vpn
  • fl_mguard_rs2000_tx\/tx-b_firmware
  • fl_mguard_rs2000_tx\/tx-b
  • fl_mguard_pcie4000_vpn_firmware
  • fl_mguard_pcie4000_vpn
  • fl_mguard_pcie4000_firmware
  • fl_mguard_pcie4000
  • fl_mguard_pci4000_vpn_firmware
  • fl_mguard_pci4000_vpn
  • fl_mguard_pci4000_firmware
  • fl_mguard_pci4000
  • fl_mguard_gt\/gt_vpn_firmware
  • fl_mguard_gt\/gt_vpn
  • fl_mguard_gt\/gt_firmware
  • fl_mguard_gt\/gt
  • fl_mguard_delta_tx\/tx_vpn_firmware
  • fl_mguard_delta_tx\/tx_vpn
  • fl_mguard_delta_tx\/tx_firmware
  • fl_mguard_delta_tx\/tx
  • fl_mguard_core_tx_vpn_firmware
  • fl_mguard_core_tx_vpn
  • fl_mguard_core_tx_firmware
  • fl_mguard_core_tx
  • fl_mguard_centerport_vpn-1000_firmware
  • fl_mguard_centerport_vpn-1000
  • fl_mguard_4305_firmware
  • fl_mguard_4305
  • fl_mguard_4302_firmware
  • fl_mguard_4302
  • fl_mguard_4102_pcie_firmware
  • fl_mguard_4102_pcie
  • fl_mguard_4102_pci_firmware
  • fl_mguard_4102_pci
  • fl_mguard_2105_firmware
  • fl_mguard_2105
  • fl_mguard_2102_firmware
  • fl_mguard_2102
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -
  • *
  • -

Description

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.

Weaknesses

CWE-770
Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

CWE ID: 770

Date

Published: Sept. 10, 2024, 8:15 a.m.

Last Modified: Sept. 28, 2024, 11:56 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

info@cert.vde.com

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o phoenixcontact tc_mguard_rs4000_4g_vzw_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs4000_4g_vzw_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs4000_4g_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs4000_4g_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs4000_4g_att_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs4000_4g_att_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs4000_3g_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs4000_3g_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs2000_4g_vzw_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs2000_4g_vzw_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs2000_4g_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs2000_4g_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs2000_4g_att_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs2000_4g_att_vpn - / / / / / / /
o phoenixcontact tc_mguard_rs2000_3g_vpn_firmware / / / / / / / /
h phoenixcontact tc_mguard_rs2000_3g_vpn - / / / / / / /
o phoenixcontact fl_mguard_smart2_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_smart2_vpn - / / / / / / /
o phoenixcontact fl_mguard_smart2_firmware / / / / / / / /
h phoenixcontact fl_mguard_smart2 - / / / / / / /
o phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn - / / / / / / /
o phoenixcontact fl_mguard_rs4004_tx\/dtx_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs4004_tx\/dtx - / / / / / / /
o phoenixcontact fl_mguard_rs4000_tx\/tx_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs4000_tx\/tx_vpn - / / / / / / /
o phoenixcontact fl_mguard_rs4000_tx\/tx-p_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs4000_tx\/tx-p - / / / / / / /
o phoenixcontact fl_mguard_rs4000_tx\/tx-m_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs4000_tx\/tx-m - / / / / / / /
o phoenixcontact fl_mguard_rs4000_tx\/tx_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs4000_tx\/tx - / / / / / / /
o phoenixcontact fl_mguard_rs2005_tx_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs2005_tx_vpn - / / / / / / /
o phoenixcontact fl_mguard_rs2000_tx\/tx_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs2000_tx\/tx_vpn - / / / / / / /
o phoenixcontact fl_mguard_rs2000_tx\/tx-b_firmware / / / / / / / /
h phoenixcontact fl_mguard_rs2000_tx\/tx-b - / / / / / / /
o phoenixcontact fl_mguard_pcie4000_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_pcie4000_vpn - / / / / / / /
o phoenixcontact fl_mguard_pcie4000_firmware / / / / / / / /
h phoenixcontact fl_mguard_pcie4000 - / / / / / / /
o phoenixcontact fl_mguard_pci4000_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_pci4000_vpn - / / / / / / /
o phoenixcontact fl_mguard_pci4000_firmware / / / / / / / /
h phoenixcontact fl_mguard_pci4000 - / / / / / / /
o phoenixcontact fl_mguard_gt\/gt_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_gt\/gt_vpn - / / / / / / /
o phoenixcontact fl_mguard_gt\/gt_firmware / / / / / / / /
h phoenixcontact fl_mguard_gt\/gt - / / / / / / /
o phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_delta_tx\/tx_vpn - / / / / / / /
o phoenixcontact fl_mguard_delta_tx\/tx_firmware / / / / / / / /
h phoenixcontact fl_mguard_delta_tx\/tx - / / / / / / /
o phoenixcontact fl_mguard_core_tx_vpn_firmware / / / / / / / /
h phoenixcontact fl_mguard_core_tx_vpn - / / / / / / /
o phoenixcontact fl_mguard_core_tx_firmware / / / / / / / /
h phoenixcontact fl_mguard_core_tx - / / / / / / /
o phoenixcontact fl_mguard_centerport_vpn-1000_firmware / / / / / / / /
h phoenixcontact fl_mguard_centerport_vpn-1000 - / / / / / / /
o phoenixcontact fl_mguard_4305_firmware / / / / / / / /
h phoenixcontact fl_mguard_4305 - / / / / / / /
o phoenixcontact fl_mguard_4302_firmware / / / / / / / /
h phoenixcontact fl_mguard_4302 - / / / / / / /
o phoenixcontact fl_mguard_4102_pcie_firmware / / / / / / / /
h phoenixcontact fl_mguard_4102_pcie - / / / / / / /
o phoenixcontact fl_mguard_4102_pci_firmware / / / / / / / /
h phoenixcontact fl_mguard_4102_pci - / / / / / / /
o phoenixcontact fl_mguard_2105_firmware / / / / / / / /
h phoenixcontact fl_mguard_2105 - / / / / / / /
o phoenixcontact fl_mguard_2102_firmware / / / / / / / /
h phoenixcontact fl_mguard_2102 - / / / / / / /

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

Base Score
5.3
Exploitability Score
3.9
Impact Score
1.4
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://cert.vde.com/ info@cert.vde.com