Cyber Resilience

CVE-2021-34598

High

Published: 10 November 2021

Published
10 November 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0027 50.6th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-34598 is a high-severity Missing Release of Memory after Effective Lifetime (CWE-401) vulnerability in Phoenixcontact Fl Mguard 1102 Firmware. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 49.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

CWE(s)
CWE-401

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

phoenixcontact
fl mguard 1102 firmware
1.4.0, 1.4.1, 1.5.0
phoenixcontact
fl mguard 1105 firmware
1.4.0, 1.4.1, 1.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References