{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "tracking": { "generator": { "date": "2025-01-15T12:32:01.472Z", "engine": { "version": "2.5.16", "name": "Secvisogram" } }, "current_release_date": "2025-05-14T12:28:19.000Z", "id": "VDE-2018-001", "initial_release_date": "2018-01-30T09:00:00.000Z", "status": "final", "version": "3", "revision_history": [ { "date": "2018-01-30T09:00:00.000Z", "summary": "Initial revision.", "number": "1" }, { "number": "2", "summary": "update publisher details", "date": "2025-01-15T11:00:00.000Z" }, { "number": "3", "summary": "Fix: version space, firmware category, added distribution", "date": "2025-05-14T12:28:19.000Z" } ], "aliases": [ "VDE-2018-001" ] }, "notes": [ { "title": "Summary", "category": "summary", "text": "The integrity of the mGuard firmware atomic update process cannot be guaranteed under all circumstances.\n\nThe mGuard atomic update mechanism relies on internal checksums for the integrity verification of some portions of the update packages. The verification of these internal checksums may not always be performed correctly." }, { "title": "Impact", "category": "description", "text": "The mGuard only allows the installation of firmware updates digitally signed by Phoenix Contact (Innominate). The atomic update mechanism that was introduced with mGuard 7.2.0 to support the current generation of devices relies on internal checksums for the verification of the internal integrity of some portions of the update packages. As the verification may not always be performed correctly, an attacker might modify firmware update packages.\n\nThis vulnerability is present in all mGuard releases since 7.2.0 on the listed devices but does not affect the current mGuard 8.6.1 release.\n\nFirmware images used to completely flash the device are not affected by this vulnerability." }, { "title": "Remediation", "category": "description", "text": "We strongly advise all mGuard users to upgrade to the firmware version 8.6.1.\n\nAlso affected are discontinued mGuard products from PHOENIX CONTACT and Innominate AG running firmware version 7.2.0 or above.\n\n| Article N° | Model | Download Link |\n|------------|--------------------------------|-------------------|\n| 2702547 | FL MGUARD CENTERPORT | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-centerport-2702547?type=firmware_update |\n| 2700967 | FL MGUARD DELTA TX/TX | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-delta-txtx-2700967?type=firmware_update |\n| 2700968 | FL MGUARD DELTA TX/TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-delta-txtx-vpn-2700968?type=firmware_update |\n| 2700197 | FL MGUARD GT/GT | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-gtgt-2700197?type=firmware_update |\n| 2700198 | FL MGUARD GT/GT VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-gtgt-vpn-2700198?type=firmware_update |\n| 2701275 | FL MGUARD PCI4000 VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-pci4000-vpn-2701275?type=firmware_update |\n| 2701278 | FL MGUARD PCIE4000 VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-pcie4000-vpn-2701278?type=firmware_update |\n| 2700642 | FL MGUARD RS2000 TX/TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs2000-txtx-vpn-2700642?type=firmware_update |\n| 2702139 | FL MGUARD RS2000 TX/TX-B | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs2000-txtx-b-2702139?type=firmware_update |\n| 2701875 | FL MGUARD RS2005 TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs2005-tx-vpn-2701875?type=firmware_update |\n| 2700634 | FL MGUARD RS4000 TX/TX | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-2700634?type=firmware_update |\n| 2200515 | FL MGUARD RS4000 TX/TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-vpn-2200515?type=firmware_update |\n| 2702465 | FL MGUARD RS4000 TX/TX VPN-M | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-vpn-m-2702465?type=firmware_update |\n| 2702259 | FL MGUARD RS4000 TX/TX-P | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-p-2702259?type=firmware_update |\n| 2701876 | FL MGUARD RS4004 TX/DTX | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4004-txdtx-2701876?type=firmware_update |\n| 2701877 | FL MGUARD RS4004 TX/DTX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4004-txdtx-vpn-2701877?type=firmware_update |\n| 2700640 | FL MGUARD SMART2 | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-smart2-2700640?type=firmware_update |\n| 2700639 | FL MGUARD SMART2 VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-smart2-vpn-2700639?type=firmware_update |\n| 2903441 | TC MGUARD RS2000 3G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs2000-3g-vpn-2903441?type=firmware_update |\n| 2903440 | TC MGUARD RS4000 3G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs4000-3g-vpn-2903440?type=firmware_update |\n| 2702831 | FL MGUARD CORE TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-smart2-2700640?type=firmware_update |\n| 2903588 | TC MGUARD RS2000 4G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs2000-4g-vpn-2903588?type=firmware_update |\n| 2903586 | TC MGUARD RS4000 4G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs4000-4g-vpn-2903586?type=firmware_update |" } ], "lang": "en-GB", "title": "PHOENIX CONTACT: Advisory for mGuard products", "publisher": { "category": "vendor", "name": "Phoenix Contact GmbH & Co. KG", "namespace": "https://phoenixcontact.com/psirt", "contact_details": "psirt@phoenixcontact.com" }, "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "acknowledgments": [ { "summary": "coordination", "organization": "CERT@VDE" } ], "references": [ { "summary": "VDE-2018-001: PHOENIX CONTACT: Advisory for mGuard products - HTML", "url": "https://certvde.com/de/advisories/VDE-2018-001/", "category": "self" }, { "category": "external", "summary": "CERT@VDE Security Advisories for PHOENIX CONTACT", "url": "https://certvde.com/de/advisories/vendor/phoenixcontact/" }, { "url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2018/vde-2018-001.json", "summary": "VDE-2018-001: PHOENIX CONTACT: Advisory for mGuard products - CSAF", "category": "self" } ] }, "product_tree": { "branches": [ { "category": "vendor", "name": "PHOENIX CONTACT", "branches": [ { "name": "Software", "category": "product_family", "branches": [ { "name": "7.2<=8.6.0", "category": "product_version_range", "product": { "name": "Software 7.2<=8.6.0", "product_id": "CSAFPID-21024" } }, { "name": "8.6.1", "category": "product_version", "product": { "name": "Software 8.6.1", "product_id": "CSAFPID-22025" } } ] }, { "name": "Hardware", "category": "product_family", "branches": [ { "name": "FL MGUARD CENTERPORT", "category": "product_name", "product": { "name": "FL MGUARD CENTERPORT", "product_id": "CSAFPID-11001", "product_identification_helper": { "serial_numbers": [ "2702547" ] } } }, { "name": "FL MGUARD CORE TX VPN", "category": "product_name", "product": { "name": "FL MGUARD CORE TX VPN", "product_id": "CSAFPID-11002", "product_identification_helper": { "serial_numbers": [ "2702831" ] } } }, { "name": "FL MGUARD DELTA TX/TX", "category": "product_name", "product": { "name": "FL MGUARD DELTA TX/TX", "product_id": "CSAFPID-11003", "product_identification_helper": { "serial_numbers": [ "2700967" ] } } }, { "name": "FL MGUARD DELTA TX/TX VPN", "category": "product_name", "product": { "name": "FL MGUARD DELTA TX/TX VPN", "product_id": "CSAFPID-11004", "product_identification_helper": { "serial_numbers": [ "2700968" ] } } }, { "name": "FL MGUARD GT/GT", "category": "product_name", "product": { "name": "FL MGUARD GT/GT", "product_id": "CSAFPID-11005", "product_identification_helper": { "serial_numbers": [ "2700197" ] } } }, { "name": "FL MGUARD GT/GT VPN", "category": "product_name", "product": { "name": "FL MGUARD GT/GT VPN", "product_id": "CSAFPID-11006", "product_identification_helper": { "serial_numbers": [ "2700198" ] } } }, { "name": "FL MGUARD PCI4000 VPN", "category": "product_name", "product": { "name": "FL MGUARD PCI4000 VPN", "product_id": "CSAFPID-11007", "product_identification_helper": { "serial_numbers": [ "2701275" ] } } }, { "name": "FL MGUARD PCIE4000 VPN", "category": "product_name", "product": { "name": "FL MGUARD PCIE4000 VPN", "product_id": "CSAFPID-11008", "product_identification_helper": { "serial_numbers": [ "2701278" ] } } }, { "name": "FL MGUARD RS2000 3G VPN", "category": "product_name", "product": { "name": "FL MGUARD RS2000 3G VPN", "product_id": "CSAFPID-11009", "product_identification_helper": { "serial_numbers": [ "2903441" ] } } }, { "name": "FL MGUARD RS2000 4G VPN", "category": "product_name", "product": { "name": "FL MGUARD RS2000 4G VPN", "product_id": "CSAFPID-11010", "product_identification_helper": { "serial_numbers": [ "2903588" ] } } }, { "name": "FL MGUARD RS2000 TX/TX-B", "category": "product_name", "product": { "name": "FL MGUARD RS2000 TX/TX-B", "product_id": "CSAFPID-11011", "product_identification_helper": { "serial_numbers": [ "2702139" ] } } }, { "name": "FL MGUARD RS2000 TX/TX VPN", "category": "product_name", "product": { "name": "FL MGUARD RS2000 TX/TX VPN", "product_id": "CSAFPID-11012", "product_identification_helper": { "serial_numbers": [ "2700642" ] } } }, { "name": "FL MGUARD RS2005 TX VPN", "category": "product_name", "product": { "name": "FL MGUARD RS2005 TX VPN", "product_id": "CSAFPID-11013", "product_identification_helper": { "serial_numbers": [ "2701875" ] } } }, { "name": "FL MGUARD RS4000 3G VPN", "category": "product_name", "product": { "name": "FL MGUARD RS4000 3G VPN", "product_id": "CSAFPID-11014", "product_identification_helper": { "serial_numbers": [ "2903440" ] } } }, { "name": "FL MGUARD RS4000 4G VPN", "category": "product_name", "product": { "name": "FL MGUARD RS4000 4G VPN", "product_id": "CSAFPID-11015", "product_identification_helper": { "serial_numbers": [ "2903586" ] } } }, { "name": "FL MGUARD RS4000 TX/TX", "category": "product_name", "product": { "name": "FL MGUARD RS4000 TX/TX", "product_id": "CSAFPID-11016", "product_identification_helper": { "serial_numbers": [ "2700634" ] } } }, { "name": "FL MGUARD RS4000 TX/TX-P", "category": "product_name", "product": { "name": "FL MGUARD RS4000 TX/TX-P", "product_id": "CSAFPID-11017", "product_identification_helper": { "serial_numbers": [ "2702259" ] } } }, { "name": "FL MGUARD RS4000 TX/TX VPN", "category": "product_name", "product": { "name": "FL MGUARD RS4000 TX/TX VPN", "product_id": "CSAFPID-11018", "product_identification_helper": { "serial_numbers": [ "2200515" ] } } }, { "name": "FL MGUARD RS4000 TX/TX VPN-M", "category": "product_name", "product": { "name": "FL MGUARD RS4000 TX/TX VPN-M", "product_id": "CSAFPID-11019", "product_identification_helper": { "serial_numbers": [ "2702465" ] } } }, { "name": "FL MGUARD RS4004 TX/DTX", "category": "product_name", "product": { "name": "FL MGUARD RS4004 TX/DTX", "product_id": "CSAFPID-11020", "product_identification_helper": { "serial_numbers": [ "2701876" ] } } }, { "name": "FL MGUARD RS4004 TX/DTX VPN", "category": "product_name", "product": { "name": "FL MGUARD RS4004 TX/DTX VPN", "product_id": "CSAFPID-11021", "product_identification_helper": { "serial_numbers": [ "2701877" ] } } }, { "name": "FL MGUARD SMART2", "category": "product_name", "product": { "name": "FL MGUARD SMART2", "product_id": "CSAFPID-11022", "product_identification_helper": { "serial_numbers": [ "2700640" ] } } }, { "name": "FL MGUARD SMART2 VPN", "category": "product_name", "product": { "name": "FL MGUARD SMART2 VPN", "product_id": "CSAFPID-11023", "product_identification_helper": { "serial_numbers": [ "2700639" ] } } } ] } ] } ], "relationships": [ { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11001", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD CENTERPORT", "product_id": "CSAFPID-31001" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11002", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD CORE TX VPN", "product_id": "CSAFPID-31002" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11003", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD DELTA TX/TX", "product_id": "CSAFPID-31003" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11004", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD DELTA TX/TX VPN", "product_id": "CSAFPID-31004" } }, { "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11005", "category": "installed_on", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD GT/GT", "product_id": "CSAFPID-31005" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11006", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD GT/GT VPN", "product_id": "CSAFPID-31006" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11007", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD PCI4000 VPN", "product_id": "CSAFPID-31007" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11008", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD PCIE4000 VPN", "product_id": "CSAFPID-31008" } }, { "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11009", "category": "installed_on", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS2000 3G VPN", "product_id": "CSAFPID-31009" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11010", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS2000 4G VPN", "product_id": "CSAFPID-31010" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11011", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS2000 TX/TX-B", "product_id": "CSAFPID-31011" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11012", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS2000 TX/TX VPN", "product_id": "CSAFPID-31012" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11013", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS2005 TX VPN", "product_id": "CSAFPID-31013" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11014", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4000 3G VPN", "product_id": "CSAFPID-31014" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11015", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4000 4G VPN", "product_id": "CSAFPID-31015" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11016", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4000 TX/TX", "product_id": "CSAFPID-31016" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11017", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4000 TX/TX-P", "product_id": "CSAFPID-31017" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11018", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4000 TX/TX VPN", "product_id": "CSAFPID-31018" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11019", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4000 TX/TX VPN-M", "product_id": "CSAFPID-31019" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11020", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4004 TX/DTX", "product_id": "CSAFPID-31020" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11021", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD RS4004 TX/DTX VPN", "product_id": "CSAFPID-31021" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11022", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD SMART2", "product_id": "CSAFPID-31022" } }, { "category": "installed_on", "product_reference": "CSAFPID-21024", "relates_to_product_reference": "CSAFPID-11023", "full_product_name": { "name": "Software 7.2<=8.6.0 installed on FL MGUARD SMART2 VPN", "product_id": "CSAFPID-31023" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11001", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD CENTERPORT", "product_id": "CSAFPID-32001" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11002", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD CORE TX VPN", "product_id": "CSAFPID-32002" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11003", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD DELTA TX/TX", "product_id": "CSAFPID-32003" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11004", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD DELTA TX/TX VPN", "product_id": "CSAFPID-32004" } }, { "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11005", "category": "installed_on", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD GT/GT", "product_id": "CSAFPID-32005" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11006", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD GT/GT VPN", "product_id": "CSAFPID-32006" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11007", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD PCI4000 VPN", "product_id": "CSAFPID-32007" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11008", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD PCIE4000 VPN", "product_id": "CSAFPID-32008" } }, { "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11009", "category": "installed_on", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS2000 3G VPN", "product_id": "CSAFPID-32009" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11010", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS2000 4G VPN", "product_id": "CSAFPID-32010" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11011", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS2000 TX/TX-B", "product_id": "CSAFPID-32011" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11012", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS2000 TX/TX VPN", "product_id": "CSAFPID-32012" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11013", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS2005 TX VPN", "product_id": "CSAFPID-32013" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11014", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4000 3G VPN", "product_id": "CSAFPID-32014" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11015", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4000 4G VPN", "product_id": "CSAFPID-32015" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11016", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4000 TX/TX", "product_id": "CSAFPID-32016" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11017", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4000 TX/TX-P", "product_id": "CSAFPID-32017" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11018", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4000 TX/TX VPN", "product_id": "CSAFPID-32018" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11019", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4000 TX/TX VPN-M", "product_id": "CSAFPID-32019" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11020", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4004 TX/DTX", "product_id": "CSAFPID-32020" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11021", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD RS4004 TX/DTX VPN", "product_id": "CSAFPID-32021" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11022", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD SMART2", "product_id": "CSAFPID-32022" } }, { "category": "installed_on", "product_reference": "CSAFPID-22025", "relates_to_product_reference": "CSAFPID-11023", "full_product_name": { "name": "Software 8.6.1 installed on FL MGUARD SMART2 VPN", "product_id": "CSAFPID-32023" } } ], "product_groups": [ { "group_id": "CSAFGID-0001", "summary": "Affected products.", "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023" ] }, { "group_id": "CSAFGID-0002", "summary": "Fixed products.", "product_ids": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023" ] } ] }, "vulnerabilities": [ { "cve": "CVE-2018-5441", "title": "CVE-2018-5441", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "title": "Vulnerability Description", "text": "An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.", "category": "description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023" ] }, "scores": [ { "cvss_v3": { "version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "temporalScore": 7.8, "temporalSeverity": "HIGH", "environmentalScore": 7.8, "environmentalSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023" ] } ], "remediations": [ { "details": "We strongly advise all mGuard users to upgrade to the firmware version 8.6.1.\n\nAlso affected are discontinued mGuard products from PHOENIX CONTACT and Innominate AG running firmware version 7.2.0 or above.\n\n| Article N° | Model | Download Link |\n|------------|--------------------------------|-------------------|\n| 2702547 | FL MGUARD CENTERPORT | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-centerport-2702547?type=firmware_update |\n| 2700967 | FL MGUARD DELTA TX/TX | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-delta-txtx-2700967?type=firmware_update |\n| 2700968 | FL MGUARD DELTA TX/TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-delta-txtx-vpn-2700968?type=firmware_update |\n| 2700197 | FL MGUARD GT/GT | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-gtgt-2700197?type=firmware_update |\n| 2700198 | FL MGUARD GT/GT VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-gtgt-vpn-2700198?type=firmware_update |\n| 2701275 | FL MGUARD PCI4000 VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-pci4000-vpn-2701275?type=firmware_update |\n| 2701278 | FL MGUARD PCIE4000 VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-pcie4000-vpn-2701278?type=firmware_update |\n| 2700642 | FL MGUARD RS2000 TX/TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs2000-txtx-vpn-2700642?type=firmware_update |\n| 2702139 | FL MGUARD RS2000 TX/TX-B | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs2000-txtx-b-2702139?type=firmware_update |\n| 2701875 | FL MGUARD RS2005 TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs2005-tx-vpn-2701875?type=firmware_update |\n| 2700634 | FL MGUARD RS4000 TX/TX | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-2700634?type=firmware_update |\n| 2200515 | FL MGUARD RS4000 TX/TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-vpn-2200515?type=firmware_update |\n| 2702465 | FL MGUARD RS4000 TX/TX VPN-M | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-vpn-m-2702465?type=firmware_update |\n| 2702259 | FL MGUARD RS4000 TX/TX-P | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4000-txtx-p-2702259?type=firmware_update |\n| 2701876 | FL MGUARD RS4004 TX/DTX | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4004-txdtx-2701876?type=firmware_update |\n| 2701877 | FL MGUARD RS4004 TX/DTX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-fl-mguard-rs4004-txdtx-vpn-2701877?type=firmware_update |\n| 2700640 | FL MGUARD SMART2 | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-smart2-2700640?type=firmware_update |\n| 2700639 | FL MGUARD SMART2 VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-smart2-vpn-2700639?type=firmware_update |\n| 2903441 | TC MGUARD RS2000 3G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs2000-3g-vpn-2903441?type=firmware_update |\n| 2903440 | TC MGUARD RS4000 3G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs4000-3g-vpn-2903440?type=firmware_update |\n| 2702831 | FL MGUARD CORE TX VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-ohne-tragschienen-montage-fl-mguard-smart2-2700640?type=firmware_update |\n| 2903588 | TC MGUARD RS2000 4G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs2000-4g-vpn-2903588?type=firmware_update |\n| 2903586 | TC MGUARD RS4000 4G VPN | https://www.phoenixcontact.com/de-de/produkte/security-router-fuer-die-tragschiene-tc-mguard-rs4000-4g-vpn-2903586?type=firmware_update |", "group_ids": [ "CSAFGID-0001" ], "category": "vendor_fix" } ] } ] }