Status: UPDATED | Advisory ID: CVE-2024-43384
| CVE | CVE-2024-43384 |
| CVSS Score / Version | 8.0 (High) / CVSS v3.1 |
| Updated | 2026-06-17 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is low; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | see table below |
| Classified as | CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Phoenix Contact | fl_mguard_2102_firmware | ||
| Phoenix Contact | fl_mguard_2105_firmware | ||
| Phoenix Contact | fl_mguard_4102_pci_firmware | ||
| Phoenix Contact | fl_mguard_4102_pcie_firmware | ||
| Phoenix Contact | fl_mguard_4302_firmware | ||
| Phoenix Contact | fl_mguard_4305_firmware | ||
| Phoenix Contact | fl_mguard_centerport_firmware | ||
| Phoenix Contact | fl_mguard_centerport_vpn-1000_firmware | ||
| Phoenix Contact | fl_mguard_core_tx_firmware | ||
| Phoenix Contact | fl_mguard_core_tx_vpn_firmware | ||
| Phoenix Contact | fl_mguard_delta_tx\/tx_firmware | ||
| Phoenix Contact | fl_mguard_delta_tx\/tx_vpn_firmware | ||
| Phoenix Contact | fl_mguard_gt\/gt_firmware | ||
| Phoenix Contact | fl_mguard_gt\/gt_vpn_firmware | ||
| Phoenix Contact | fl_mguard_pci4000_firmware | ||
| Phoenix Contact | fl_mguard_pci4000_vpn_firmware | ||
| Phoenix Contact | fl_mguard_pcie4000_firmware | ||
| Phoenix Contact | fl_mguard_pcie4000_vpn_firmware | ||
| Phoenix Contact | fl_mguard_rs2000_tx\/tx_vpn_firmware | ||
| Phoenix Contact | fl_mguard_rs2000_tx\/tx-b_firmware | ||
| Phoenix Contact | fl_mguard_rs2005_tx_vpn_firmware | ||
| Phoenix Contact | fl_mguard_rs4000_tx\/tx_firmware | ||
| Phoenix Contact | fl_mguard_rs4000_tx\/tx_vpn_firmware | ||
| Phoenix Contact | fl_mguard_rs4000_tx\/tx-m_firmware | ||
| Phoenix Contact | fl_mguard_rs4000_tx\/tx-p_firmware | ||
| Phoenix Contact | fl_mguard_rs4004_tx\/dtx_firmware | ||
| Phoenix Contact | fl_mguard_rs4004_tx\/dtx_vpn_firmware | ||
| Phoenix Contact | fl_mguard_smart2_firmware | ||
| Phoenix Contact | fl_mguard_smart2_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs2000_3g_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs2000_4g_att_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs2000_4g_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs2000_4g_vzw_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs4000_3g_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs4000_4g_att_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs4000_4g_vpn_firmware | ||
| Phoenix Contact | tc_mguard_rs4000_4g_vzw_vpn_firmware | ||
| Phoenix Contact | FL MGUARD 2102 | ||
| Phoenix Contact | FL MGUARD 2105 | ||
| Phoenix Contact | FL MGUARD 4102 PCI | ||
| Phoenix Contact | FL MGUARD 4102 PCIE | ||
| Phoenix Contact | FL MGUARD 4302 | ||
| Phoenix Contact | FL MGUARD 4305 | ||
| Phoenix Contact | FL MGUARD CENTERPORT VPN-1000 | ||
| Phoenix Contact | FL MGUARD CORE TX | ||
| Phoenix Contact | FL MGUARD CORE TX VPN | ||
| Phoenix Contact | FL MGUARD DELTA TX/TX | ||
| Phoenix Contact | FL MGUARD DELTA TX/TX VPN | ||
| Phoenix Contact | FL MGUARD GT/GT | ||
| Phoenix Contact | FL MGUARD GT/GT VPN | ||
| Phoenix Contact | FL MGUARD PCI4000 | ||
| Phoenix Contact | FL MGUARD PCI4000 VPN | ||
| Phoenix Contact | FL MGUARD PCIE4000 | ||
| Phoenix Contact | FL MGUARD PCIE4000 VPN | ||
| Phoenix Contact | FL MGUARD RS2000 TX/TX-B | ||
| Phoenix Contact | FL MGUARD RS2000 TX/TX VPN | ||
| Phoenix Contact | FL MGUARD RS2005 TX VPN | ||
| Phoenix Contact | FL MGUARD RS4000 TX/TX | ||
| Phoenix Contact | FL MGUARD RS4000 TX/TX-M | ||
| Phoenix Contact | FL MGUARD RS4000 TX/TX-P | ||
| Phoenix Contact | FL MGUARD RS4000 TX/TX VPN | ||
| Phoenix Contact | FL MGUARD RS4004 TX/DTX | ||
| Phoenix Contact | FL MGUARD RS4004 TX/DTX VPN | ||
| Phoenix Contact | FL MGUARD SMART2 | ||
| Phoenix Contact | FL MGUARD SMART2 VPN | ||
| Phoenix Contact | TC MGUARD RS2000 3G VPN | ||
| Phoenix Contact | TC MGUARD RS2000 4G ATT VPN | ||
| Phoenix Contact | TC MGUARD RS2000 4G VPN | ||
| Phoenix Contact | TC MGUARD RS2000 4G VZW VPN | ||
| Phoenix Contact | TC MGUARD RS4000 3G VPN | ||
| Phoenix Contact | TC MGUARD RS4000 4G ATT VPN | ||
| Phoenix Contact | TC MGUARD RS4000 4G VPN | ||
| Phoenix Contact | TC MGUARD RS4000 4G VZW VPN |
| Subsystems | General OT |
| Sectors | Multiple |
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
Monitor Phoenix Contact's web page for any future patch releases.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2024-43384 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2024-43384 |