Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH
view advisory published 2024-09-10
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
02
references
External citations — patches, advisories, analysis.
- Phoenix Contact advisory overview at CERT@VDEexternal
- VDE-2024-051: Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH - HTMLself
- Phoenix Contact PSIRTexternal
- VDE-2024-051: Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH - CSAFself
03
remediations (2)
- Mitigation
Access to the SSH server should be limited to trustworthy networks or peers.
- Fixed
Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan