Skip to content
Fencer Vulns
medium 5.3

CVE-2023-2673 json

PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

published 2023-06-13 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-34137

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 49%
public exploits
0
none known

Summary

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
22 mo ago

Exploit prediction

0.62% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

  • PHOENIX CONTACT FL MGUARD 2102
  • PHOENIX CONTACT FL MGUARD 4102 PCI
  • PHOENIX CONTACT FL MGUARD 4102 PCIE
  • PHOENIX CONTACT FL MGUARD 4302
  • PHOENIX CONTACT FL MGUARD CENTERPORT
  • PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000
  • PHOENIX CONTACT FL MGUARD CORE TX
  • PHOENIX CONTACT FL MGUARD CORE TX VPN
  • PHOENIX CONTACT FL MGUARD DELTA TX/TX
  • PHOENIX CONTACT FL MGUARD DELTA TX/TX VPN
  • PHOENIX CONTACT FL MGUARD GT/GT
  • PHOENIX CONTACT FL MGUARD GT/GT VPN
  • PHOENIX CONTACT FL MGUARD PCI4000
  • PHOENIX CONTACT FL MGUARD PCI4000 VPN
  • PHOENIX CONTACT FL MGUARD PCIE4000
  • PHOENIX CONTACT FL MGUARD PCIE4000 VPN
  • PHOENIX CONTACT FL MGUARD RS2000 TX/TX-B
  • PHOENIX CONTACT FL MGUARD RS2000 TX/TX VPN
  • PHOENIX CONTACT FL MGUARD RS2005 TX VPN
  • PHOENIX CONTACT FL MGUARD RS4000 TX/TX-M
  • PHOENIX CONTACT FL MGUARD RS4000 TX/TX-P
  • PHOENIX CONTACT FL MGUARD RS4000 TX/TX VPN
  • PHOENIX CONTACT FL MGUARD RS4004 TX/DTX
  • PHOENIX CONTACT FL MGUARD RS4004 TX/DTX VPN
  • PHOENIX CONTACT FL MGUARD SMART2
  • PHOENIX CONTACT FL MGUARD SMART2 VPN

Classification

Weakness
  • CWE-1287 Improper Validation of Specified Type of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.