CVE-2017-7937

MEDIUM

Phoenix Contact GmbH mGuard firmware 8.3.0-8.4.2 - Improper Authentication

Title source: llm
STIX 2.1

Description

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01

Scores

CVSS v3 4.0
EPSS 0.0071
EPSS Percentile 49.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Details

CWE
CWE-287
Status published
Products (7)
n/a/Phoenix Contact GmbH mGuard Phoenix Contact GmbH mGuard
phoenix_contact_gmbh/mguard_firmware 8.3.0
phoenix_contact_gmbh/mguard_firmware 8.3.1
phoenix_contact_gmbh/mguard_firmware 8.3.2
phoenix_contact_gmbh/mguard_firmware 8.4.0
phoenix_contact_gmbh/mguard_firmware 8.4.1
phoenix_contact_gmbh/mguard_firmware 8.4.2
Published May 19, 2017
Tracked Since Feb 18, 2026