CVE-2024-43388 HIGH

CVE-2024-43388: Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices

Vendor Phoenix Contact
Product FL MGUARD 2102
Weakness CWE-94 · Code injection
Published September 10, 2024
Last update August 22, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.

Key dates

02Disclosure timeline

September 10, 2024 CVE published
August 22, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-11600 Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.0 - Authenticated (Administrator+) Remote Code Execution CVE-2026-45714 CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE CVE-2026-13500 antlr ANTLR4 Grammar Action Block OutputFile.java code injection CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter CVE-2024-31864 Apache Zeppelin: Remote code execution by adding malicious JDBC connection string