CVEvulnerability
CVE-2021-34598
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-11-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-401
Description
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active
Affected configurations
• phoenixcontact fl mguard 1102 firmware 1.4.0
• phoenixcontact fl mguard 1102 firmware 1.4.1
• phoenixcontact fl mguard 1102 firmware 1.5.0
• phoenixcontact fl mguard 1105 firmware 1.4.0
• phoenixcontact fl mguard 1105 firmware 1.4.1
• phoenixcontact fl mguard 1105 firmware 1.5.0
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://cert.vde.com/en/advisories/VDE-2021-046/ Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2021-046/ Third Party Advisory