| Article No° | Product Name | Affected Version(s) |
|---|---|---|
| 2702547 | FL MGUARD CENTERPORT | 7.2 <= 8.6.0 |
| 2702831 | FL MGUARD CORE TX VPN | 7.2 <= 8.6.0 |
| 2700967 | FL MGUARD DELTA TX/TX | 7.2 <= 8.6.0 |
| 2700968 | FL MGUARD DELTA TX/TX VPN | 7.2 <= 8.6.0 |
| 2700197 | FL MGUARD GT/GT | 7.2 <= 8.6.0 |
| 2700198 | FL MGUARD GT/GT VPN | 7.2 <= 8.6.0 |
| 2701275 | FL MGUARD PCI4000 VPN | 7.2 <= 8.6.0 |
| 2701278 | FL MGUARD PCIE4000 VPN | 7.2 <= 8.6.0 |
| 2903441 | FL MGUARD RS2000 3G VPN | 7.2 <= 8.6.0 |
| 2903588 | FL MGUARD RS2000 4G VPN | 7.2 <= 8.6.0 |
| 2702139 | FL MGUARD RS2000 TX/TX-B | 7.2 <= 8.6.0 |
| 2700642 | FL MGUARD RS2000 TX/TX VPN | 7.2 <= 8.6.0 |
| 2701875 | FL MGUARD RS2005 TX VPN | 7.2 <= 8.6.0 |
| 2903440 | FL MGUARD RS4000 3G VPN | 7.2 <= 8.6.0 |
| 2903586 | FL MGUARD RS4000 4G VPN | 7.2 <= 8.6.0 |
| 2700634 | FL MGUARD RS4000 TX/TX | 7.2 <= 8.6.0 |
| 2702259 | FL MGUARD RS4000 TX/TX-P | 7.2 <= 8.6.0 |
| 2200515 | FL MGUARD RS4000 TX/TX VPN | 7.2 <= 8.6.0 |
| 2702465 | FL MGUARD RS4000 TX/TX VPN-M | 7.2 <= 8.6.0 |
| 2701876 | FL MGUARD RS4004 TX/DTX | 7.2 <= 8.6.0 |
| 2701877 | FL MGUARD RS4004 TX/DTX VPN | 7.2 <= 8.6.0 |
| 2700640 | FL MGUARD SMART2 | 7.2 <= 8.6.0 |
| 2700639 | FL MGUARD SMART2 VPN | 7.2 <= 8.6.0 |
The integrity of the mGuard firmware atomic update process cannot be guaranteed under all circumstances.
The mGuard atomic update mechanism relies on internal checksums for the integrity verification of some portions of the update packages. The verification of these internal checksums may not always be performed correctly.
The mGuard only allows the installation of firmware updates digitally signed by Phoenix Contact (Innominate). The atomic update mechanism that was introduced with mGuard 7.2.0 to support the current generation of devices relies on internal checksums for the verification of the internal integrity of some portions of the update packages. As the verification may not always be performed correctly, an attacker might modify firmware update packages.
This vulnerability is present in all mGuard releases since 7.2.0 on the listed devices but does not affect the current mGuard 8.6.1 release.
Firmware images used to completely flash the device are not affected by this vulnerability.
We strongly advise all mGuard users to upgrade to the firmware version 8.6.1.
Also affected are discontinued mGuard products from PHOENIX CONTACT and Innominate AG running firmware version 7.2.0 or above.
| Article N° | Model | Download Link |
| 2702547 | FL MGUARD CENTERPORT | download |
| 2700967 | FL MGUARD DELTA TX/TX | download |
| 2700968 | FL MGUARD DELTA TX/TX VPN | download |
| 2700197 | FL MGUARD GT/GT | download |
| 2700198 | FL MGUARD GT/GT VPN | download |
| 2701275 | FL MGUARD PCI4000 VPN | download |
| 2701278 | FL MGUARD PCIE4000 VPN | download |
| 2700642 | FL MGUARD RS2000 TX/TX VPN | download |
| 2702139 | FL MGUARD RS2000 TX/TX-B | download |
| 2701875 | FL MGUARD RS2005 TX VPN | download |
| 2700634 | FL MGUARD RS4000 TX/TX | download |
| 2200515 | FL MGUARD RS4000 TX/TX VPN | download |
| 2702465 | FL MGUARD RS4000 TX/TX VPN-M | download |
| 2702259 | FL MGUARD RS4000 TX/TX-P | download |
| 2701876 | FL MGUARD RS4004 TX/DTX | download |
| 2701877 | FL MGUARD RS4004 TX/DTX VPN | download |
| 2700640 | FL MGUARD SMART2 | download |
| 2700639 | FL MGUARD SMART2 VPN | download |
| 2903441 | TC MGUARD RS2000 3G VPN | download |
| 2903440 | TC MGUARD RS4000 3G VPN | download |
| 2702831 | FL MGUARD CORE TX VPN | download |
| 2903588 | TC MGUARD RS2000 4G VPN | download |
| 2903586 | TC MGUARD RS4000 4G VPN | download |
PHOENIX CONTACT reported this vulnerability to CERT@VDE.