{"id":"CVE-2018-5441","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5441","generatedAt":"2026-10-28T21:57:47.761Z","title":"An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages.","description":"An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.","published":"2018-01-30T20:29:00.000Z","lastModified":"2026-06-17T02:00:20.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.0","score":7.8,"severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-354","CWE-20"],"affected":["phoenixcontact/mguard centerport firmware","phoenixcontact/mguard delta tx\\/tx firmware","phoenixcontact/mguard delta tx\\/tx vpn firmware","phoenixcontact/mguard gt\\/gt firmware","phoenixcontact/mguard gt\\/gt vpn firmware","phoenixcontact/mguard pci4000 vpn firmware","phoenixcontact/mguard pcie4000 vpn firmware","phoenixcontact/mguard rs2000 tx\\/tx vpn firmware","phoenixcontact/mguard rs2000 tx\\/tx-b firmware","phoenixcontact/mguard rs2005 tx vpn firmware","phoenixcontact/mguard rs4000 tx\\/tx firmware","phoenixcontact/mguard rs4000 tx\\/tx vpn firmware","phoenixcontact/mguard rs4000 tx\\/tx vpn-m firmware","phoenixcontact/mguard rs4000 tx\\/tx-p firmware","phoenixcontact/mguard rs4004 tx\\/dtx firmware","phoenixcontact/mguard rs4004 tx\\/dtx vpn firmware","phoenixcontact/mguard smart2 firmware","phoenixcontact/mguard smart2 vpn firmware","phoenixcontact/mguard rs2000 3g vpn firmware","phoenixcontact/mguard rs4000 3g vpn firmware","phoenixcontact/mguard core tx vpn firmware","phoenixcontact/mguard rs2000 4g vpn firmware","phoenixcontact/mguard rs4000 4g vpn firmware"],"epss":{"score":0.00283,"percentile":0.20715,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/102907","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-001","tags":["Patch","Third Party Advisory"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01","tags":["Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/102907","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-001","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5441","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}