CVE-2024-43388

HIGH
Published Sep 10, 2024 Modified Aug 22, 2025 CWE-94

Description

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.

Is your site exposed to CVE-2024-43388?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-94 CWE-94

Affected Products

Vendor Product
phoenixcontact tc_mguard_rs4000_4g_vzw_vpn_firmware
phoenixcontact tc_mguard_rs4000_4g_vzw_vpn
phoenixcontact tc_mguard_rs4000_4g_vpn_firmware
phoenixcontact tc_mguard_rs4000_4g_vpn
phoenixcontact tc_mguard_rs4000_4g_att_vpn_firmware
phoenixcontact tc_mguard_rs4000_4g_att_vpn
phoenixcontact tc_mguard_rs4000_3g_vpn_firmware
phoenixcontact tc_mguard_rs4000_3g_vpn
phoenixcontact tc_mguard_rs2000_4g_vzw_vpn_firmware
phoenixcontact tc_mguard_rs2000_4g_vzw_vpn
phoenixcontact tc_mguard_rs2000_4g_vpn_firmware
phoenixcontact tc_mguard_rs2000_4g_vpn
phoenixcontact tc_mguard_rs2000_4g_att_vpn_firmware
phoenixcontact tc_mguard_rs2000_4g_att_vpn
phoenixcontact tc_mguard_rs2000_3g_vpn_firmware
phoenixcontact tc_mguard_rs2000_3g_vpn
phoenixcontact fl_mguard_smart2_vpn_firmware
phoenixcontact fl_mguard_smart2_vpn
phoenixcontact fl_mguard_smart2_firmware
phoenixcontact fl_mguard_smart2
phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmware
phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn
phoenixcontact fl_mguard_rs4004_tx\/dtx_firmware
phoenixcontact fl_mguard_rs4004_tx\/dtx
phoenixcontact fl_mguard_rs4000_tx\/tx_vpn_firmware
phoenixcontact fl_mguard_rs4000_tx\/tx_vpn
phoenixcontact fl_mguard_rs4000_tx\/tx-p_firmware
phoenixcontact fl_mguard_rs4000_tx\/tx-p
phoenixcontact fl_mguard_rs4000_tx\/tx-m_firmware
phoenixcontact fl_mguard_rs4000_tx\/tx-m
phoenixcontact fl_mguard_rs4000_tx\/tx_firmware
phoenixcontact fl_mguard_rs4000_tx\/tx
phoenixcontact fl_mguard_rs2005_tx_vpn_firmware
phoenixcontact fl_mguard_rs2005_tx_vpn
phoenixcontact fl_mguard_rs2000_tx\/tx_vpn_firmware
phoenixcontact fl_mguard_rs2000_tx\/tx_vpn
phoenixcontact fl_mguard_rs2000_tx\/tx-b_firmware
phoenixcontact fl_mguard_rs2000_tx\/tx-b
phoenixcontact fl_mguard_pcie4000_vpn_firmware
phoenixcontact fl_mguard_pcie4000_vpn
phoenixcontact fl_mguard_pcie4000_firmware
phoenixcontact fl_mguard_pcie4000
phoenixcontact fl_mguard_pci4000_vpn_firmware
phoenixcontact fl_mguard_pci4000_vpn
phoenixcontact fl_mguard_pci4000_firmware
phoenixcontact fl_mguard_pci4000
phoenixcontact fl_mguard_gt\/gt_vpn_firmware
phoenixcontact fl_mguard_gt\/gt_vpn
phoenixcontact fl_mguard_gt\/gt_firmware
phoenixcontact fl_mguard_gt\/gt
phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmware
phoenixcontact fl_mguard_delta_tx\/tx_vpn
phoenixcontact fl_mguard_delta_tx\/tx_firmware
phoenixcontact fl_mguard_delta_tx\/tx
phoenixcontact fl_mguard_core_tx_vpn_firmware
phoenixcontact fl_mguard_core_tx_vpn
phoenixcontact fl_mguard_core_tx_firmware
phoenixcontact fl_mguard_core_tx
phoenixcontact fl_mguard_centerport_vpn-1000_firmware
phoenixcontact fl_mguard_centerport_vpn-1000
phoenixcontact fl_mguard_4305_firmware
phoenixcontact fl_mguard_4305
phoenixcontact fl_mguard_4302_firmware
phoenixcontact fl_mguard_4302
phoenixcontact fl_mguard_4102_pcie_firmware
phoenixcontact fl_mguard_4102_pcie
phoenixcontact fl_mguard_4102_pci_firmware
phoenixcontact fl_mguard_4102_pci
phoenixcontact fl_mguard_2105_firmware
phoenixcontact fl_mguard_2105
phoenixcontact fl_mguard_2102_firmware
phoenixcontact fl_mguard_2102

References

Frequently Asked Questions

What is CVE-2024-43388? +
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. It has a CVSS v3.1 base score of 8.8 (HIGH).
How severe is CVE-2024-43388? +
CVE-2024-43388 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-43388? +
CVE-2024-43388 affects products from phoenixcontact, specifically: fl_mguard_2102, fl_mguard_2102_firmware, fl_mguard_2105, fl_mguard_2105_firmware, fl_mguard_4102_pci, fl_mguard_4102_pci_firmware, fl_mguard_4102_pcie, fl_mguard_4102_pcie_firmware, fl_mguard_4302, fl_mguard_4302_firmware, fl_mguard_4305, fl_mguard_4305_firmware, fl_mguard_centerport_vpn-1000, fl_mguard_centerport_vpn-1000_firmware, fl_mguard_core_tx, fl_mguard_core_tx_firmware, fl_mguard_core_tx_vpn, fl_mguard_core_tx_vpn_firmware, fl_mguard_delta_tx\/tx, fl_mguard_delta_tx\/tx_firmware, fl_mguard_delta_tx\/tx_vpn, fl_mguard_delta_tx\/tx_vpn_firmware, fl_mguard_gt\/gt, fl_mguard_gt\/gt_firmware, fl_mguard_gt\/gt_vpn, fl_mguard_gt\/gt_vpn_firmware, fl_mguard_pci4000, fl_mguard_pci4000_firmware, fl_mguard_pci4000_vpn, fl_mguard_pci4000_vpn_firmware, fl_mguard_pcie4000, fl_mguard_pcie4000_firmware, fl_mguard_pcie4000_vpn, fl_mguard_pcie4000_vpn_firmware, fl_mguard_rs2000_tx\/tx-b, fl_mguard_rs2000_tx\/tx-b_firmware, fl_mguard_rs2000_tx\/tx_vpn, fl_mguard_rs2000_tx\/tx_vpn_firmware, fl_mguard_rs2005_tx_vpn, fl_mguard_rs2005_tx_vpn_firmware, fl_mguard_rs4000_tx\/tx, fl_mguard_rs4000_tx\/tx-m, fl_mguard_rs4000_tx\/tx-m_firmware, fl_mguard_rs4000_tx\/tx-p, fl_mguard_rs4000_tx\/tx-p_firmware, fl_mguard_rs4000_tx\/tx_firmware, fl_mguard_rs4000_tx\/tx_vpn, fl_mguard_rs4000_tx\/tx_vpn_firmware, fl_mguard_rs4004_tx\/dtx, fl_mguard_rs4004_tx\/dtx_firmware, fl_mguard_rs4004_tx\/dtx_vpn, fl_mguard_rs4004_tx\/dtx_vpn_firmware, fl_mguard_smart2, fl_mguard_smart2_firmware, fl_mguard_smart2_vpn, fl_mguard_smart2_vpn_firmware, tc_mguard_rs2000_3g_vpn, tc_mguard_rs2000_3g_vpn_firmware, tc_mguard_rs2000_4g_att_vpn, tc_mguard_rs2000_4g_att_vpn_firmware, tc_mguard_rs2000_4g_vpn, tc_mguard_rs2000_4g_vpn_firmware, tc_mguard_rs2000_4g_vzw_vpn, tc_mguard_rs2000_4g_vzw_vpn_firmware, tc_mguard_rs4000_3g_vpn, tc_mguard_rs4000_3g_vpn_firmware, tc_mguard_rs4000_4g_att_vpn, tc_mguard_rs4000_4g_att_vpn_firmware, tc_mguard_rs4000_4g_vpn, tc_mguard_rs4000_4g_vpn_firmware, tc_mguard_rs4000_4g_vzw_vpn, tc_mguard_rs4000_4g_vzw_vpn_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-43388? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-43388 — free, no signup required.