CVE-2020-12523 - CVE House
Back to Database
Status published Medium CVE-2020-12523

Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration

Vulnerability Description

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12523

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Discovered by SMST Designers & Constructors B.V., Phoenix Contact reported to CERT@VDE

References

More from Phoenix Contact

View All →
CVE-2025-41752
Reflected XSS vulnerability in pxc_portSfp.php
High 7.1
CVE-2025-41751
Reflected XSS vulnerability in pxc_portCntr.php
High 7.1
CVE-2025-41750
Reflected XSS vulnerability in pxc_PortCfg.php
High 7.1
CVE-2025-41749
Reflected XSS vulnerability in port_util.php
High 7.1
CVE-2025-41748
Reflected XSS vulnerability in pxc_Dot1xCfg.php
High 7.1

Affected Vendor

Phoenix Contact

View all reports →

Affected Software

TC MGUARD RS4000 4G VZW VPN (1010461), TC MGUARD RS4000 4G ATT VPN (1010463), FL MGUARD RS4004 TX/DTX (2701876), FL MGUARD RS4004 TX/DTX VPN (2701877), TC MGUARD RS4000 3G VPN (2903440), TC MGUARD RS4000 4G VPN (2903586), Innominate mGuard rs4000 4TX/TX, Innominate mGuard rs4000 4TX/TX VPN, Innominate mGuard rs4000 4TX/3G/TX VPN
Vulnerable Versions:
unspecified

Timeline

Official Publish: December 17th, 2020
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Weaknesses (CWE)

CWE-909

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.