CVE-2020-12523

mediumpriority · track · 36EPSS 0.009 · 59 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.90% (59th) EPSS

CVSS 6.4 · medium

Is it mine?

36 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · phoenix_contact_psirt

EPSS · scored 2026-10-27

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedphoenix_contact_psirt
Mitigation Instead of deactivating by configuration, network cables should be detached from affected switchports. Solution PHOENIX CONTACT recommends all mGuard users to upgrade to the firmware version 8.8.3.
Mitigationphoenix_contact_psirt
Instead of deactivating by configuration, network cables should be detached from affected switch ports.

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.4–9.1

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 4.9

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.2

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Lsecondary · ENISA EU

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Lsecondary · info@cert.vde.comexploitability 2.8 · impact 2.5

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · Phoenix Contact PSIRT DE

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-909USprimaryCWE-909US

affected products (36)

Products and version ranges known to be affected.

FL MGUARD RS4004 TX/DTX (2701876)unspecified → 8.8.3enisa_euvdEU
FL MGUARD RS4004 TX/DTX VPN (2701877)unspecified → 8.8.3enisa_euvdEU
Innominate mGuard rs4000 4TX/3G/TX VPNunspecified → 8.8.3enisa_euvdEU
Innominate mGuard rs4000 4TX/TXunspecified → 8.8.3enisa_euvdEU
Innominate mGuard rs4000 4TX/TX VPNunspecified → 8.8.3enisa_euvdEU
TC MGUARD RS4000 3G VPN (2903440)unspecified → 8.8.3enisa_euvdEU
TC MGUARD RS4000 4G ATT VPN (1010463)unspecified → 8.8.3enisa_euvdEU
TC MGUARD RS4000 4G VPN (2903586)unspecified → 8.8.3enisa_euvdEU
TC MGUARD RS4000 4G VZW VPN (1010461)unspecified → 8.8.3enisa_euvdEU
phoenixcontact fl mguard rs4004 tx/dtx firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:fl_mguard_rs4004_tx\/dtx_firmware:*:*:*:*:*:*:*:*
phoenixcontact fl mguard rs4004 tx/dtx vpn firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:fl_mguard_rs4004_tx\/dtx_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontact innominate mguard rs4000 4tx/3g/tx vpn firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:innominate_mguard_rs4000_4tx\/3g\/tx_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontact innominate mguard rs4000 4tx/tx firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:innominate_mguard_rs4000_4tx\/tx_firmware:*:*:*:*:*:*:*:*
phoenixcontact innominate mguard rs4000 4tx/tx vpn firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:innominate_mguard_rs4000_4tx\/tx_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc mguard rs4000 3g vpn firmwareall versionsnvdUScpe:2.3:o:phoenixcontact:tc_mguard_rs4000_3g_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc mguard rs4000 4g att vpn firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_att_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc mguard rs4000 4g vpn firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vpn_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc mguard rs4000 4g vzw vpn firmware< 8.8.3nvdUScpe:2.3:o:phoenixcontact:tc_mguard_rs4000_4g_vzw_vpn_firmware:*:*:*:*:*:*:*:*
Firmware 8.8.3 installed on FL MGUARD RS4004 TX/DTXall versionsfixedphoenix_contact_psirtDE
Firmware 8.8.3 installed on FL MGUARD RS4004 TX/DTX VPNall versionsfixedphoenix_contact_psirtDE

showing 20 of 36

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2020-046PHOENIX CONTACT: mGuard <8.8.3 products missing initialization of resource2020-12-17csaf · phoenix_contact_psirtDE
For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource (CWE-909).

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd phoenix_contact_psirt NVD CVE.org MITRE

published 2020-12-17modified 2026-06-17

related (138)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-0847US	high7.8OT critical	92.8% (100th)	KEV	2022-03-10
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ker…
CVE-2015-5621US	high7.5	38.3% (99th)	Exploit	2015-08-19
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, whi…
CVE-2022-29968US	high7.8	1.06% (64th)	Exploit	2022-05-02
An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.
CVE-2018-1000224US	high7.5	3.79% (90th)	Exploit	2018-08-20
Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing paddi…
CVE-2022-22704US	critical9.8	1.33% (71st)	—	2022-01-06
The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) dete…

+133 more

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan