CVE-2018-5441 - AskarLabs CVE Database

CVE-2018-5441

Vendor N/A

Product PHOENIX CONTACT mGuard

Weakness CWE-354

Published January 30, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.

Key dates

02Disclosure timeline

January 30, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-5441 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/354.html

Related vulnerabilities

04Related CVE

CVE-2017-3224 Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages) CVE-2026-8597 Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK CVE-2025-3479 Forminator <= 1.42.0 - Order Replay Vulnerability CVE-2021-37182 CVE-2025-4616 Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser