CVE-2017-7937

Опубликовано: 19 мая 2017

Источник: nvd

CVSS3: 4

CVSS2: 4.3

EPSS Низкий

Описание

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.0:*:*:*:*:*:*:*

cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.1:*:*:*:*:*:*:*

cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.2:*:*:*:*:*:*:*

cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.0:*:*:*:*:*:*:*

cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.1:*:*:*:*:*:*:*

cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.2:*:*:*:*:*:*:*

cpe:2.3:h:phoenix_contact_gmbh:mguard:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00153

Низкий

4 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-93xj-xqmv-6cxx