Search vulnerabilities

Results 2

Export CSV
CVE-2021-34598

Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
CVE-2021-34582

Phoenix Contact: FL MGUARD XSS through web-based management and REST API

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors