Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PHOENIX CONTACT FL MGUARD FL MGUARD 1102 (No. 1153079)*, FL MGUARD 1105 (No. 1153078)* Clear all filters
TI-2021-13616 CVE-2021-34598 · GHSA-2mrx-q835-w93g

Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality

Priority LOW 35

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00933 Published 2021-11-10 No fix listed CWE-401
TI-2021-13600 CVE-2021-34582 · GHSA-g738-v6qm-gpqv

Phoenix Contact: FL MGUARD XSS through web-based management and REST API

Priority LOW 22

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00292 Published 2021-11-10 No fix listed CWE-79