An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.

Project Subscriptions

Vendors Products
Phoenixcontact Subscribe
Mguard Centerport Subscribe
Mguard Centerport Firmware Subscribe
Mguard Core Tx Vpn Subscribe
Mguard Core Tx Vpn Firmware Subscribe
Mguard Delta Tx\/tx Subscribe
Mguard Delta Tx\/tx Firmware Subscribe
Mguard Delta Tx\/tx Vpn Subscribe
Mguard Delta Tx\/tx Vpn Firmware Subscribe
Mguard Gt\/gt Subscribe
Mguard Gt\/gt Firmware Subscribe
Mguard Gt\/gt Vpn Subscribe
Mguard Gt\/gt Vpn Firmware Subscribe
Mguard Pci4000 Vpn Subscribe
Mguard Pci4000 Vpn Firmware Subscribe
Mguard Pcie4000 Vpn Subscribe
Mguard Pcie4000 Vpn Firmware Subscribe
Mguard Rs2000 3g Vpn Subscribe
Mguard Rs2000 3g Vpn Firmware Subscribe
Mguard Rs2000 4g Vpn Subscribe
Mguard Rs2000 4g Vpn Firmware Subscribe
Mguard Rs2000 Tx\/tx-b Subscribe
Mguard Rs2000 Tx\/tx-b Firmware Subscribe
Mguard Rs2000 Tx\/tx Vpn Subscribe
Mguard Rs2000 Tx\/tx Vpn Firmware Subscribe
Mguard Rs2005 Tx Vpn Subscribe
Mguard Rs2005 Tx Vpn Firmware Subscribe
Mguard Rs4000 3g Vpn Subscribe
Mguard Rs4000 3g Vpn Firmware Subscribe
Mguard Rs4000 4g Vpn Subscribe
Mguard Rs4000 4g Vpn Firmware Subscribe
Mguard Rs4000 Tx\/tx Subscribe
Mguard Rs4000 Tx\/tx-p Subscribe
Mguard Rs4000 Tx\/tx-p Firmware Subscribe
Mguard Rs4000 Tx\/tx Firmware Subscribe
Mguard Rs4000 Tx\/tx Vpn Subscribe
Mguard Rs4000 Tx\/tx Vpn-m Subscribe
Mguard Rs4000 Tx\/tx Vpn-m Firmware Subscribe
Mguard Rs4000 Tx\/tx Vpn Firmware Subscribe
Mguard Rs4004 Tx\/dtx Subscribe
Mguard Rs4004 Tx\/dtx Firmware Subscribe
Mguard Rs4004 Tx\/dtx Vpn Subscribe
Mguard Rs4004 Tx\/dtx Vpn Firmware Subscribe
Mguard Smart2 Subscribe
Mguard Smart2 Firmware Subscribe
Mguard Smart2 Vpn Subscribe
Mguard Smart2 Vpn Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2018-17211 An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2024-08-05T05:33:44.317Z

Reserved: 2018-01-12T00:00:00

Link: CVE-2018-5441

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-01-30T20:29:00.457

Modified: 2024-11-21T04:08:48.653

Link: CVE-2018-5441

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses