CVEvulnerability
CVE-2024-43384
8.0 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-07
- Last modified
- 2026-10-27
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.0 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-212
Description
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
Affected configurations
• phoenixcontact fl mguard 2102 firmware (< 10.4.1)
• phoenixcontact fl mguard 2105 firmware (< 10.4.1)
• phoenixcontact fl mguard 4102 pci firmware (< 10.4.1)
• phoenixcontact fl mguard 4102 pcie firmware (< 10.4.1)
• phoenixcontact fl mguard 4302 firmware (< 10.4.1)
• phoenixcontact fl mguard 4305 firmware (< 10.4.1)
• phoenixcontact fl mguard centerport firmware (< 8.9.3)
• phoenixcontact fl mguard centerport vpn-1000 firmware (< 8.9.3)
• phoenixcontact fl mguard core tx firmware (< 8.9.3)
• phoenixcontact fl mguard core tx vpn firmware (< 8.9.3)
• phoenixcontact fl mguard delta tx\/tx firmware (< 8.9.3)
• phoenixcontact fl mguard delta tx\/tx vpn firmware (< 8.9.3)
• phoenixcontact fl mguard gt\/gt firmware (< 8.9.3)
• phoenixcontact fl mguard gt\/gt vpn firmware (< 8.9.3)
• phoenixcontact fl mguard pci4000 firmware (< 8.9.3)
• phoenixcontact fl mguard pci4000 vpn firmware (< 8.9.3)
• phoenixcontact fl mguard pcie4000 firmware (< 8.9.3)
• phoenixcontact fl mguard pcie4000 vpn firmware (< 8.9.3)
• phoenixcontact fl mguard rs2000 tx\/tx vpn firmware (< 8.9.3)
• phoenixcontact fl mguard rs2000 tx\/tx-b firmware (< 8.9.3)
• phoenixcontact fl mguard rs2005 tx vpn firmware (< 8.9.3)
• phoenixcontact fl mguard rs4000 tx\/tx firmware (< 8.9.3)
• phoenixcontact fl mguard rs4000 tx\/tx vpn firmware (< 8.9.3)
• phoenixcontact fl mguard rs4000 tx\/tx-m firmware (< 8.9.3)
• phoenixcontact fl mguard rs4000 tx\/tx-p firmware (< 8.9.3)
• phoenixcontact fl mguard rs4004 tx\/dtx firmware (< 8.9.3)
• phoenixcontact fl mguard rs4004 tx\/dtx vpn firmware (< 8.9.3)
• phoenixcontact fl mguard smart2 firmware (< 8.9.3)
• phoenixcontact fl mguard smart2 vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs2000 3g vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs2000 4g att vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs2000 4g vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs2000 4g vzw vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs4000 3g vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs4000 4g att vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs4000 4g vpn firmware (< 8.9.3)
• phoenixcontact tc mguard rs4000 4g vzw vpn firmware (< 8.9.3)
Related
Weakness · CWE (1)
- CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness
References
- https://certvde.com/en/advisories/VDE-2024-039 Third Party Advisory