Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family

published 2022-11-15 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-42852

cvss: 7.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.9%; EPSS 0.9% chance of exploitation in 30 days, percentile 60%
public exploits: 0; none known

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.

Patch / fix

fixed in 30

PHOENIX CONTACT FL MGUARD CENTERPORT 8.9.0
PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000 8.9.0
PHOENIX CONTACT FL MGUARD CORE TX 8.9.0
PHOENIX CONTACT FL MGUARD CORE TX VPN 8.9.0
PHOENIX CONTACT FL MGUARD DELTA TX/TX 8.9.0
PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN 8.9.0
PHOENIX CONTACT FL MGUARD GT/GT 8.9.0
PHOENIX CONTACT FL MGUARD GT/GT VPN 8.9.0
PHOENIX CONTACT FL MGUARD PCI4000 8.9.0
PHOENIX CONTACT FL MGUARD PCI4000 VPN 8.9.0
PHOENIX CONTACT FL MGUARD PCIE4000 8.9.0
PHOENIX CONTACT FL MGUARD PCIE4000 VPN 8.9.0
PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B 8.9.0
PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN 8.9.0
PHOENIX CONTACT FL MGUARD RS2005 TX VPN 8.9.0
PHOENIX CONTACT FL MGUARD RS4000 TX/TX 8.9.0
PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M 8.9.0
PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P 8.9.0
PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN 8.9.0
PHOENIX CONTACT FL MGUARD RS4004 TX/DTX 8.9.0
PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN 8.9.0
PHOENIX CONTACT FL MGUARD SMART2 8.9.0
PHOENIX CONTACT FL MGUARD SMART2 VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS2000 3G VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS2000 4G VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS4000 3G VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN 8.9.0
PHOENIX CONTACT TC MGUARD RS4000 4G VPN 8.9.0

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: partial
Assessed: 18 mo ago (2025-04-29)

Exploit prediction

0.93% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

PHOENIX CONTACT FL MGUARD CENTERPORT
PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000
PHOENIX CONTACT FL MGUARD CORE TX
PHOENIX CONTACT FL MGUARD CORE TX VPN
PHOENIX CONTACT FL MGUARD DELTA TX/TX
PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN
PHOENIX CONTACT FL MGUARD GT/GT
PHOENIX CONTACT FL MGUARD GT/GT VPN
PHOENIX CONTACT FL MGUARD PCI4000
PHOENIX CONTACT FL MGUARD PCI4000 VPN
PHOENIX CONTACT FL MGUARD PCIE4000
PHOENIX CONTACT FL MGUARD PCIE4000 VPN
PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B
PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN
PHOENIX CONTACT FL MGUARD RS2005 TX VPN
PHOENIX CONTACT FL MGUARD RS4000 TX/TX
PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M
PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P
PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN
PHOENIX CONTACT FL MGUARD RS4004 TX/DTX
PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN
PHOENIX CONTACT FL MGUARD SMART2
PHOENIX CONTACT FL MGUARD SMART2 VPN
PHOENIX CONTACT TC MGUARD RS2000 3G VPN
PHOENIX CONTACT TC MGUARD RS2000 4G ATT VPN
PHOENIX CONTACT TC MGUARD RS2000 4G VPN
PHOENIX CONTACT TC MGUARD RS2000 4G VZW VPN
PHOENIX CONTACT TC MGUARD RS4000 3G VPN
PHOENIX CONTACT TC MGUARD RS4000 4G ATT VPN
PHOENIX CONTACT TC MGUARD RS4000 4G VPN
PHOENIX CONTACT TC MGUARD RS4000 4G VZW VPN

Classification

Weakness

CWE-770 Allocation of Resources Without Limits or Throttling

References

cert.vde.com /en/advisories/VDE-2022-051/
mitigation, third-party-advisory

Sources

CVE List CVE-2022-3480
NVD CVE-2022-3480

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary