Phoenixcontact FL MGUARD DM 1.12.0
Approved changes feed: RSS · Atom
cpe:2.3:a:phoenixcontact:fl_mguard_dm:1.12.0:*:*:*:*:*:*:*
part: a version: 1.12.0 update: *
| Vendor | Phoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265) |
|---|---|
| Product | Fl Mguard Dm (6db74ef8-ee9c-518c-8668-cce39ac9f655) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34579 |
vulnerable | 2026-06-08 05:32:14.142191 |
PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management
HIGH (7.5)
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download and therefore read mGuard configuration profiles (“ATV profiles”). Such configuration profiles may contain sensitive information, e.g. private keys associated with IPsec VPN connections.
Published: 2022-11-09T16:28:32.817Z
Updated: 2025-04-29T15:02:14.286Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.