CVE-2023-2673
PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
- Published
- Updated
- Reserved
- Assigned by
- CERTVDE
Description
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
Timeline
ID reserved
By CERTVDE
- 32 days later
· 32 days later
Published
- 19 months later
· 19 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CERTVDECNA (assigner) | 3.1 | Medium5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
| NVDNVD · Modified | 3.1 | Medium5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
- EPSS (exploitation in 30 days)
- 0.62% · top 50% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
PHOENIX CONTACT · FL MGUARD 2102
- affected ≤ 10.1.1
PHOENIX CONTACT · FL MGUARD 4102 PCI
- affected ≤ 10.1.1
PHOENIX CONTACT · FL MGUARD 4102 PCIE
- affected ≤ 10.1.1
PHOENIX CONTACT · FL MGUARD 4302
- affected ≤ 10.1.1
PHOENIX CONTACT · FL MGUARD CENTERPORT
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD CENTERPORT VPN-1000
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD CORE TX
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD CORE TX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD DELTA TX/TX
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD DELTA TX/TX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD GT/GT
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD GT/GT VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD PCI4000
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD PCI4000 VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD PCIE4000
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD PCIE4000 VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS2000 TX/TX-B
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS2000 TX/TX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS2005 TX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS4000 TX/TX-M
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS4000 TX/TX-P
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS4000 TX/TX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS4000 TX/TX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS4004 TX/DTX
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD RS4004 TX/DTX VPN
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD SMART2
- affected ≤ 8.9.0
PHOENIX CONTACT · FL MGUARD SMART2 VPN
- affected ≤ 8.9.0
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-2673)Record last updated .