Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-7698
PUBLISHED
More InfoOfficial Page
Assigner-CERTVDE
Assigner Org ID-270ccfa6-a436-4e77-922e-914ec3a9685c
View Known Exploited Vulnerability (KEV) details
Published At-10 Sep, 2024 | 08:42
Updated At-22 Aug, 2025 | 06:21
Rejected At-
▼CVE Numbering Authority (CNA)
Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

Affected Products
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD 2102
Default Status
unaffected
Versions
Affected
  • From 0 before 10.4.1 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD 2105
Default Status
unaffected
Versions
Affected
  • From 0 before 10.4.1 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD 4102 PCI
Default Status
unaffected
Versions
Affected
  • From 0 before 10.4.1 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD 4102 PCIE
Default Status
unaffected
Versions
Affected
  • From 0 before 10.4.1 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD 4302
Default Status
unaffected
Versions
Affected
  • From 0 before 10.4.1 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD 4305
Default Status
unaffected
Versions
Affected
  • From 0 before 10.4.1 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD CENTERPORT VPN-1000
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD CORE TX
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD CORE TX VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD DELTA TX/TX
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD DELTA TX/TX VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD GT/GT
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD GT/GT VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD PCI4000
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD PCI4000 VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD PCIE4000
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD PCIE4000 VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS2000 TX/TX-B
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS2000 TX/TX VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS2005 TX VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS4000 TX/TX
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS4000 TX/TX-M
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS4000 TX/TX-P
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS4000 TX/TX VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS4004 TX/DTX
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD RS4004 TX/DTX VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD SMART2
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
FL MGUARD SMART2 VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS2000 3G VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS2000 4G ATT VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS2000 4G VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS2000 4G VZW VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS4000 3G VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS4000 4G ATT VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS4000 4G VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Vendor
Phoenix Contact GmbH & Co. KGPHOENIX CONTACT
Product
TC MGUARD RS4000 4G VZW VPN
Default Status
unaffected
Versions
Affected
  • From 0 before 8.9.3 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-201CWE-201 Insertion of Sensitive Information Into Sent Data
Type: CWE
CWE ID: CWE-201
Description: CWE-201 Insertion of Sensitive Information Into Sent Data
Metrics
VersionBase scoreBase severityVector
3.15.7MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Version: 3.1
Base score: 5.7
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Andrea Palanca
reporter
Nozomi Networks Security Research Team
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://cert.vde.com/en/advisories/VDE-2024-039
N/A
Hyperlink: https://cert.vde.com/en/advisories/VDE-2024-039
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found