On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reb...
Vendor
innominate vulnerabilities
5 published CVES affecting innominate, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 1
- High
- 2
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- mguard firmware 4
- mGuard 2
- Innominate mGuard rs4000 4TX/3G/TX VPN 1
- Innominate mGuard rs4000 4TX/TX 1
- Innominate mGuard rs4000 4TX/TX VPN 1
Latest innominate CVEs
Newest publication first
-
CriticalCVSS 9.1 EPSS 0.90%
-
MediumCVSS 4.0 EPSS 1.6%
The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.
-
HighCVSS 9.0 EPSS 3.1%
Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.
-
CVE-2014-2356 Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor
PublishedMediumCVSS 5.0 EPSS 3.4%Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.
-
HighCVSS 7.1 EPSS 1.2%
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.