PHOENIX CONTACT mGuard

An attacker with local access to an mGuard device could gain complete control over the device through user interaction, potentially allowing them to bypass security controls, modify network traffic rules, or disrupt network operations protected by the mGuard.

Organizations using Phoenix Contact mGuard devices (industrial network security appliances and industrial firewalls) in any critical infrastructure sector, including water utilities, electric utilities, and manufacturing facilities, should implement isolation and access controls to minimize risk.

An attacker with physical or local network access to an mGuard device could trigger the vulnerability through user interaction (such as clicking a malicious link or opening a crafted file on the device). This would allow the attacker to execute code with the privileges of the user, potentially escalating to full device control.