PatchTheCVEmguard firmware vulnerabilities and fixes
Recent CVEs affecting mguard firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: mguardfirmware.
mguard firmware has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-05-19. Highest priority: CVE-2017-5159 (score 60/100).
- CVE-2017-7937 MEDIUM 4.0 MITIGATE An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.
- CVE-2017-7935 HIGH 7.5 MITIGATE A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2
- CVE-2017-5159 CRITICAL 9.8 MITIGATE An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0
- CVE-2015-3966 MEDIUM 4.0 MITIGATE The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote a
- CVE-2014-9193 HIGH 8.5 UPGRADE Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain
- CVE-2014-2356 MEDIUM 4.3 UPGRADE Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, wh
FAQ
How do I fix mguard firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mguard firmware being exploited right now?
None of the tracked mguard firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mguard firmware CVE should I patch first?
CVE-2017-5159 currently ranks highest (60/100): An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0.