CVE:CVE-2018-5441
CNNVD:CNNVD-201801-1078
PHOENIX CONTACT mGuard是德国菲尼克斯电气（PHOENIX CONTACT）集团的一套应用于工业以太网领域的设备安全管理软件。
使用7.2至8.6.0版本固件的PHOENIX CONTACT mGuard中存在安全漏洞，该漏洞源于程序没有正确的对更新包执行内部完整性检测。攻击者可利用该漏洞更改固件更新包。
solution:Upgrade phoenixcontact mguard_centerport_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_delta_tx/tx_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_delta_tx/tx_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_gt/gt_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_gt/gt_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_pci4000_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_pcie4000_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs2000_tx/tx_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs2000_tx/tx-b_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs2005_tx_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4000_tx/tx_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4000_tx/tx_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4000_tx/tx_vpn-m_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4000_tx/tx-p_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4004_tx/dtx_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4004_tx/dtx_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_smart2_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_smart2_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs2000_3g_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4000_3g_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_core_tx_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs2000_4g_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]; Upgrade phoenixcontact mguard_rs4000_4g_vpn_firmware to a higher version than 8.6.0,and avoid the version [7.2.0,8.6.0]