SARA / Free Tools / CVE / CVE-2022-3480

CVE-2022-3480 — A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CO

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incomi

CVSS
7.5 HIGH
EPSS
0.75% (top 27.10%)
CWE
CWE-770
Published
2022-11-15T10:58:25.780Z
Last modified
2025-04-29T20:13:45.498Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

01What is this vulnerability?

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue.

02Affected products

VendorProductVersions
PHOENIX CONTACTFL MGUARD CENTERPORT0
PHOENIX CONTACTFL MGUARD CENTERPORT VPN1000 — 0
PHOENIX CONTACTFL MGUARD CORE TX0
PHOENIX CONTACTFL MGUARD CORE TX VPN0
PHOENIX CONTACTFL MGUARD DELTA TX/TX0
PHOENIX CONTACTFL MGUARD DELTA TX/TX VPN0
PHOENIX CONTACTFL MGUARD GT/GT0
PHOENIX CONTACTFL MGUARD GT/GT VPN0
PHOENIX CONTACTFL MGUARD PCI40000
PHOENIX CONTACTFL MGUARD PCI4000 VPN0
PHOENIX CONTACTFL MGUARD PCIE40000
PHOENIX CONTACTFL MGUARD PCIE4000 VPN0
PHOENIX CONTACTFL MGUARD RS2000 TX/TXB — 0
PHOENIX CONTACTFL MGUARD RS2000 TX/TX VPN0
PHOENIX CONTACTFL MGUARD RS2005 TX VPN0
PHOENIX CONTACTFL MGUARD RS4000 TX/TX0
PHOENIX CONTACTFL MGUARD RS4000 TX/TXM — 0
PHOENIX CONTACTFL MGUARD RS4000 TX/TXP — 0
PHOENIX CONTACTFL MGUARD RS4000 TX/TX VPN0
PHOENIX CONTACTFL MGUARD RS4004 TX/DTX0
PHOENIX CONTACTFL MGUARD RS4004 TX/DTX VPN0
PHOENIX CONTACTFL MGUARD SMART20
PHOENIX CONTACTFL MGUARD SMART2 VPN0
PHOENIX CONTACTTC MGUARD RS2000 3G VPN0
PHOENIX CONTACTTC MGUARD RS2000 4G ATT VPN0
PHOENIX CONTACTTC MGUARD RS2000 4G VPN0
PHOENIX CONTACTTC MGUARD RS2000 4G VZW VPN0
PHOENIX CONTACTTC MGUARD RS4000 3G VPN0
PHOENIX CONTACTTC MGUARD RS4000 4G ATT VPN0
PHOENIX CONTACTTC MGUARD RS4000 4G VPN0
PHOENIX CONTACTTC MGUARD RS4000 4G VZW VPN0

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →