CVE-2021-34582

lowPriorität · verfolgen · 19EPSS 0.003 · 22. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.29% (22nd) EPSS

CVSS 3.5 · low

Is it mine?

16 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · phoenix_contact_psirt

EPSS · bewertet 2026-10-28

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenphoenix_contact_psirt
PHOENIX CONTACT recomments to upgrade to firmware version 1.5.1 (or any later version) which fixes both vulnerabitlities. If the Basic settings > LDAP or Logs > Remote logging page are viewed after the upgrade, an exploit that may have been embedded into these pages is no longer effective. It is recommended to review all settings for modifications that an untrusted user may have made by exploiting this vulnerability before the upgrade. It is recommended to mistrust logs (generated before the upgrade) with respect to which user modified any settings.
Mitigationphoenix_contact_psirt
CVE-2021-34582: If an untrusted user may have exploited the vulnerability, it is recommended to revoke access for that user, and to re-upload the certificates on the Basic settings > LDAP and Logs > Remote logging pages through the REST API (i.e., without viewing these pages in the web-based management). CVE-2021-34598: To prevent the possibility of an attack, it is recommended to deactivate remote logging.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.5–4.8

v2.03.5lowAV:N/AC:M/Au:S/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 6.8 · Auswirkung 2.9

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nprimary · NVD / NIST USAusnutzbarkeit 1.7 · Auswirkung 2.7

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nsecondary · ENISA EU

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nsecondary · info@cert.vde.comAusnutzbarkeit 1.7 · Auswirkung 2.7

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nsecondary · Phoenix Contact PSIRT DE

v3.14.4mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-79USCWE-79US

betroffene Produkte (16)

Betroffene Produkte und Versionsbereiche.

PHOENIX CONTACT FL MGUARD1.4.0 → FL MGUARD 1102 (No. 1153079)*enisa_euvdEU
PHOENIX CONTACT FL MGUARD1.4.0 → FL MGUARD 1105 (No. 1153078)*enisa_euvdEU
phoenixcontact fl mguard 1102 firmware= 1.4.0nvdUScpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:*:*:*:*:*:*:*:*
phoenixcontact fl mguard 1102 firmware= 1.4.1nvdUScpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:*:*:*:*:*:*:*:*
phoenixcontact fl mguard 1102 firmware= 1.5.0nvdUScpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:*:*:*:*:*:*:*:*
phoenixcontact fl mguard 1105 firmware= 1.4.0nvdUScpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:*:*:*:*:*:*:*:*
phoenixcontact fl mguard 1105 firmware= 1.4.1nvdUScpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:*:*:*:*:*:*:*:*
phoenixcontact fl mguard 1105 firmware= 1.5.0nvdUScpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:*:*:*:*:*:*:*:*
Firmware 1.4.0 installed on FL MGUARD 1102alle Versionenphoenix_contact_psirtDE
Firmware 1.4.0 installed on FL MGUARD 1105alle Versionenphoenix_contact_psirtDE
Firmware 1.4.1 installed on FL MGUARD 1102alle Versionenphoenix_contact_psirtDE
Firmware 1.4.1 installed on FL MGUARD 1105alle Versionenphoenix_contact_psirtDE
Firmware 1.5.0 installed on FL MGUARD 1102alle Versionenphoenix_contact_psirtDE
Firmware 1.5.0 installed on FL MGUARD 1105alle Versionenphoenix_contact_psirtDE
Firmware 1.5.1 installed on FL MGUARD 1102alle Versionenfixedphoenix_contact_psirtDE
Firmware 1.5.1 installed on FL MGUARD 1105alle Versionenfixedphoenix_contact_psirtDE

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

VDE-2021-046PHOENIX CONTACT: XSS and memory-leak in FL MGUARD 1102/11052021-11-10csaf · phoenix_contact_psirtDE
Cross-site scripting in web-based management and memory leak in the remote logging function of FL MGUARD 1102 and FL MGUARD 1105. CVE-2021-34582: The file upload functionality in the web-based management is affected by a stored cross-site scripting vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation). An authenticated FL MGUARD user with Admin or Super Admin role can upload a certificate file on the Basic settings > LDAP page, on the Logs > Remote logging page, or through the REST API. The content of this file is embedded into the corresponding web page, and any HTML code within the file is rendered when the page is viewed by the same or a different authenticated user. CVE-2021-34598: The remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active (CWE-770: Allocation of Resources Without Limits or Throttling).

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd phoenix_contact_psirt NVD CVE.org MITRE

veröffentlicht 2021-11-10geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan