CVE-2024-7699 HIGH

CVE-2024-7699: Phoenix Contact: OS command execution in MGUARD products

Vendor Phoenix Contact
Product FL MGUARD 2102
Weakness CWE-78
Published September 10, 2024
Last update September 10, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data.

Key dates

02Disclosure timeline

September 10, 2024 CVE published
September 10, 2024 Record updated