CVE-2021-34598: Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality
First published: Wed Nov 10 2021(Updated: )
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Phoenixcontact Fl Mguard 1102 Firmware | =1.4.0 | |
| Phoenixcontact Fl Mguard 1102 Firmware | =1.4.1 | |
| Phoenixcontact Fl Mguard 1102 Firmware | =1.5.0 | |
| Phoenixcontact Fl Mguard 1102 | ||
| Phoenixcontact Fl Mguard 1105 Firmware | =1.4.0 | |
| Phoenixcontact Fl Mguard 1105 Firmware | =1.4.1 | |
| Phoenixcontact Fl Mguard 1105 Firmware | =1.5.0 | |
| Phoenixcontact Fl Mguard 1105 |
Remedy
PHOENIX CONTACT recomments to upgrade to firmware version 1.5.1 (or any later version).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability identifier for this Phoenix Contact FL MGUARD issue?
The vulnerability identifier for this issue is CVE-2021-34598.
What is the severity level of CVE-2021-34598?
The severity level of CVE-2021-34598 is high with a score of 7.5.
Which versions of Phoenix Contact FL MGUARD are affected by CVE-2021-34598?
Versions 1.4.0, 1.4.1, and 1.5.0 of Phoenix Contact FL MGUARD are affected by CVE-2021-34598.
What is the impact of CVE-2021-34598?
CVE-2021-34598 impairs the remote logging functionality due to the lack of memory release for data structures from syslog-ng when remote logging is active.
Where can I find more information about CVE-2021-34598?
You can find more information about CVE-2021-34598 at the following reference: https://cert.vde.com/en/advisories/VDE-2021-046/
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/title
- agent/last-modified-date
- agent/references
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/phoenixcontact
- canonical/phoenixcontact fl mguard 1102 firmware
- version/phoenixcontact fl mguard 1102 firmware/1.4.0
- version/phoenixcontact fl mguard 1102 firmware/1.4.1
- version/phoenixcontact fl mguard 1102 firmware/1.5.0
- canonical/phoenixcontact fl mguard 1102
- canonical/phoenixcontact fl mguard 1105 firmware
- version/phoenixcontact fl mguard 1105 firmware/1.4.0
- version/phoenixcontact fl mguard 1105 firmware/1.4.1
- version/phoenixcontact fl mguard 1105 firmware/1.5.0
- canonical/phoenixcontact fl mguard 1105