CVE-2023-2673
mediumpriority · track · 0EPSS 0.006 · 50 %ileDEEURUUSEPSS · scored 2026-10-27
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedphoenix_contact_psirt
The vulnerabilities are fixed in firmware versions 8.9.1 and 10.2.0. We strongly recommend all affected FL MGUARD users to upgrade to this or a later version.
- Mitigationphoenix_contact_psirt
Do not use RSA based ciphers for encryption of network traffic, use cipher suites with forward secrecy for TLS or IPsec communication and renew vulnerable certificates frequently. Configure the incoming IPv4 packet filter carefully to protect clients from potentially malicious UDP packets.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (128)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- VDE-2023-010PHOENIX CONTACT: FL MGUARD affected by two vulnerabilities2023-06-13csaf · phoenix_contact_psirtDE
The FL MGUARD family of devices is affected by two vulnerabilities.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan