CVE-2021-34598

Published: Nov 10, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: info@cert.vde.com (Secondary)

Description

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

Affected (6)

Products: Phoenixcontact: Fl Mguard 1102 Firmware, Fl Mguard 1105 Firmware

Phoenixcontact

2 products

Fl Mguard 1102 Firmware

Fl Mguard 1105 Firmware

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard 1102 Firmware	Version 1.4.0
Phoenixcontact Fl Mguard 1102 Firmware	Version 1.4.1
Phoenixcontact Fl Mguard 1102 Firmware	Version 1.5.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard 1102	All versions

Configuration B

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Mguard 1105 Firmware	Version 1.4.0
Phoenixcontact Fl Mguard 1105 Firmware	Version 1.4.1
Phoenixcontact Fl Mguard 1105 Firmware	Version 1.5.0

Running on/with	Platform Versions
Phoenixcontact Fl Mguard 1105	All versions

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://cert.vde.com/en/advisories/VDE-2021-046/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2021-046/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.