CVE-2021-34598

Опубликовано: 10 нояб. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Низкий

Описание

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

Ссылки

https://cert.vde.com/en/advisories/VDE-2021-046/
Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2021-046/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.0:*:*:*:*:*:*:*

cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.1:*:*:*:*:*:*:*

cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.5.0:*:*:*:*:*:*:*

cpe:2.3:h:phoenixcontact:fl_mguard_1102:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.0:*:*:*:*:*:*:*

cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.1:*:*:*:*:*:*:*

cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.5.0:*:*:*:*:*:*:*

cpe:2.3:h:phoenixcontact:fl_mguard_1105:-:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00268

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-401

Связанные уязвимости

GHSA-2mrx-q835-w93g