Phoenix Contact FL Mguard vulnerabilities

2 vulnerabilities

Known vulnerabilities in Phoenix Contact FL Mguard, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2021-34582phoenix contactfl mguard+2
EPSS score
0.29%
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.7.5CVE-2021-34598phoenix contactfl mguard+2
EPSS score
0.93%
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active