Phoenix Contact: Multiple Vulnerabilities in mGuard devices

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the
variable EMAIL_RELAY_PASSWORD in mGuard devices.

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of
special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.

A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of
special elements in the variable PROXY_HTTP_PORT in mGuard devices

An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special
elements in user data.

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or
transfer.

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet
forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP
FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable
which can lead to a DoS.

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet
forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP
FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet
forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead
to a DoS.

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT
through the FW_NAT.IN_IP environment variable which can lead to a DoS.

A low privileged remote attacker can perform configuration changes of the ospf service through
OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF
attacks.