CVE-2024-43384— Phoenix Contact: Improper removal of sensitive information in MGUARD products
Quick assessment
Affected
PHOENIX CONTACT FL MGUARD 2102
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PHOENIX CONTACT FL MGUARD 2102等都是德国菲尼克斯电气（PHOENIX CONTACT）公司的产品。PHOENIX CONTACT FL MGUARD 2102是一款路由器。PHOENIX CONTACT FL MGUARD 2105是一款路由器。PHOENIX CONTACT FL MGUARD是一系列路由器。 PHOENIX CONTACT多款产品存在安全漏洞，该漏洞源于在存储或传输前未正确移除敏感信息，可能导致低权限远程攻击者获取root密码。以下产品受到影响：FL MG
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud StorageAffected Version Matrix 36
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-43384
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Phoenix Contact: Improper removal of sensitive information in MGUARD products
Source: CVE Program / CVE List V5
Vulnerability Description
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的不恰当跨边界移除
Source: CVE Program / CVE List V5
Vulnerability Title
PHOENIX CONTACT多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHOENIX CONTACT FL MGUARD 2102等都是德国菲尼克斯电气（PHOENIX CONTACT）公司的产品。PHOENIX CONTACT FL MGUARD 2102是一款路由器。PHOENIX CONTACT FL MGUARD 2105是一款路由器。PHOENIX CONTACT FL MGUARD是一系列路由器。 PHOENIX CONTACT多款产品存在安全漏洞，该漏洞源于在存储或传输前未正确移除敏感信息，可能导致低权限远程攻击者获取root密码。以下产品受到影响：FL MG
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-43384
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-43384
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-43384 (1)
IV. Related Vulnerabilities
Same product: FL MGUARD 2102
-
CVE-2024-43393
Phoenix Contact: Configuration changes of the firewall servi -
CVE-2024-43392
Phoenix Contact: Firewall reconfiguration through the FW_env -
CVE-2024-43391
Phoenix Contact: Firewall reconfiguration through the FW_POR -
CVE-2024-43390
Phoenix Contact: Firewall reconfiguration due to improper in -
CVE-2024-43389
Phoenix Contact: OSPF reconfiguration due to improper input
Same weakness: CWE-212
-
CVE-2026-96879
"Checked by" label in page history should not be shown if th -
CVE-2026-17511
This Power System update is being released to address -
CVE-2026-90860
Canva鸿蒙版1.15.1前WebView会话劫持漏洞 -
CVE-2026-67071
HCL DevOps Deploy / HCL Launch is susceptible to an Improper -
CVE-2026-73440
Security Advisory 0178
V. Comments for CVE-2024-43384
No comments yet