Lucene search

[email protected]CVE-2021-34598

HistoryNov 10, 2021 - 12:15 p.m.

CVE-2021-34598

2021-11-1012:15:16

CWE-401

[email protected]

web.nvd.nist.gov

cve-2021-34598

phoenix contact

fl mguard

remote logging

memory release

syslog-ng

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

Affected configurations

NVD

Node

phoenixcontactfl_mguard_1102_firmwareMatch1.4.0

phoenixcontactfl_mguard_1102_firmwareMatch1.4.1

phoenixcontactfl_mguard_1102_firmwareMatch1.5.0

AND

phoenixcontactfl_mguard_1102Match-

Node

phoenixcontactfl_mguard_1105_firmwareMatch1.4.0

phoenixcontactfl_mguard_1105_firmwareMatch1.4.1

phoenixcontactfl_mguard_1105_firmwareMatch1.5.0

AND

phoenixcontactfl_mguard_1105Match-

CPENameOperatorVersion
phoenixcontact:fl_mguard_1102_firmwarephoenixcontact fl mguard 1102 firmwareeq1.4.0
phoenixcontact:fl_mguard_1102_firmwarephoenixcontact fl mguard 1102 firmwareeq1.4.1
phoenixcontact:fl_mguard_1102_firmwarephoenixcontact fl mguard 1102 firmwareeq1.5.0

CPE	Name	Operator	Version
phoenixcontact:fl_mguard_1102_firmware	phoenixcontact fl mguard 1102 firmware	eq	1.4.0
phoenixcontact:fl_mguard_1102_firmware	phoenixcontact fl mguard 1102 firmware	eq	1.4.1
phoenixcontact:fl_mguard_1102_firmware	phoenixcontact fl mguard 1102 firmware	eq	1.5.0

CNA Affected

[
  {
    "product": "FL MGUARD",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThan": "FL MGUARD 1102 (No. 1153079)*",
        "status": "affected",
        "version": "1.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "FL MGUARD 1105 (No. 1153078)*",
        "status": "affected",
        "version": "1.4.0",
        "versionType": "custom"
      }
    ]
  }
]

References

cert.vde.com/en/advisories/VDE-2021-046/

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON

Related for CVE-2021-34598

cvelist1 nvd1 prion1