High severity · published Nov 9, 2022
CVE-2021-34579
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login…
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download and therefore read mGuard configuration profiles (“ATV profiles”). Such configuration profiles may contain sensitive information, e.g. private keys associated with IPsec VPN connections.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FM
FL Mguard DM · Phoenixcontact
1.12.0; 1.13.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-34579
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-34579
Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2021-035/
More from FL Mguard DM
9.0
CVE-2017-10102
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
8.3
CVE-2017-10116
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
8.1
CVE-2017-10078
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting)
7.5
CVE-2017-10176
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
7.5
CVE-2017-10118
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)