Innominate mGuard Privilege Escalation Vulnerability

Innominate mGuard firmware versions 8.1.3 and earlier contain a privilege escalation vulnerability (CWE-269) that allows a user with local or authenticated access to the appliance to gain administrative privileges. An attacker exploiting this flaw could modify firewall rules, alter network access policies, disable security controls, or reconfigure the device in ways that compromise network security. The mGuard is a critical security appliance in industrial networks, and administrative compromise could allow an attacker to modify or disable protections for SCADA systems and control devices.