CVE-2017-5159

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0

published February 13, 2017

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

⚠️ An update that resets your mGuard admin password to default is a sneaky oversight! 😱 Think of it like changing the lock on your front door but forgetting to mention that the new key is just like the old one — anyone with the old key can waltz right back in! This vulnerability could enable anyone with access to the device to regain control, potentially leading to unauthorized changes or access to sensitive configurations. If you're not careful, you might end up handing the keys to your kingdom to someone you don't trust!

Put simply

Think of it like changing the lock on your front door but forgetting to mention that the new key is just like the old one — anyone with the old key can waltz right back in! When updating Phoenix Contact mGuard devices to Version 8.4.0, the admin password resets to its default value, which could allow unauthorized users to access the device.

What to do

This vulnerability could enable anyone with access to the device to regain control, potentially leading to unauthorized changes or access to sensitive configurations. If you're not careful, you might end up handing the keys to your kingdom to someone you don't trust! To safeguard your devices, ensure to manually change the admin password after the update to Version 8.4.0. It’s also a good idea to monitor access logs for any unauthorized login attempts following the update. You’ve got this! Stay on top of your security, and you’ll keep your devices safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02428 · 84.1th percentile
Published
2017-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0
    cvelistv5