CVE Catalog
CVE-2017-5159
CriticalSummary
An issue was discovered on Phoenix Contact mGuard devices updated to Version 8.4.0, where updating the device resets the admin user's password to its default value.
Risk Assessment
Organizations may be exposed to unauthorized access to devices, as the default password may be known or easily guessable.
Recommendation
It is recommended to immediately change the admin password after updating to Version 8.4.0 and to monitor access to the devices.
Original NVD description (English source)
An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value.