Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH
Advisory ansehen veröffentlicht 2024-09-10
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Phoenix Contact advisory overview at CERT@VDEexternal
- VDE-2024-051: Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH - HTMLself
- Phoenix Contact PSIRTexternal
- VDE-2024-051: Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH - CSAFself
03
Behebungen (2)
- Mitigation
Access to the SSH server should be limited to trustworthy networks or peers.
- Behoben
Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan