VULNERABILITY INTELLIGENCE

CVE-2017-7937

CVSS score4 MEDIUM

EPSS probability0.71%

CISA KEVNot currently listed

Published2017-05-19

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Description

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.

Weakness classification

CWE-287: Improper Authentication

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource