CVE Feed

    Dashboard / CVE / CVE-2021-34579

    CVE-2021-34579

    In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download and therefore read mGuard configuration profiles (“ATV profiles”). Such configuration profiles may contain sensitive information, e.g. private keys associated with IPsec VPN connections.

    Published:Nov 9, 2022
    Last Modified:Apr 29, 2025
    EPS:Nov 9, 2022
    EPSS Score:0.00109
    CVSS Score:7.5

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Fl Mguard Dm

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2017-10102 (CVSS 9) — Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported vers…
    CVE-2017-10078 (CVSS 8.1) — Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that…
    CVE-2017-10108 (CVSS 5.3) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serializati…
    CVE-2017-10116 (CVSS 8.3) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). …
    CVE-2017-10198 (CVSS 6.8) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). …
    CVE-2017-10053 (CVSS 5.3) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Suppor…
    CVE-2017-10115 (CVSS 7.5) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Suppo…
    CVE-2017-10135 (CVSS 5.9) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Suppo…
    CVE-2017-10118 (CVSS 7.5) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Suppo…
    CVE-2017-10176 (CVSS 7.5) — Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High