← back
CVE-2024-7734

Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.

CVSS 5.3 MEDIUMEPSS 0.5%CWE-770
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.5%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
10 Sep 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →