High Number of TCP Connections Can Lead to Valid IPsec VPN Peers Blocking
CVE-2024-7734

5.3MEDIUM

Key Information:

Vendor
Phoenix Contact
Status
Fl Mguard 2102
Fl Mguard 2105
Fl Mguard 4102 Pci
Fl Mguard 4102 Pcie
Vendor
CVE Published:
10 September 2024

Summary

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.

Affected Version(s)

FL MGUARD 2102 0 < 10.4.1

FL MGUARD 2105 0 < 10.4.1

FL MGUARD 4102 PCI 0 < 10.4.1

References

https://cert.vde.com/en/advisories/VDE-2024-052

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.