CVE-2024-43384
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
Scoring
- Severity
- HIGH
- CVSS base score
- 8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- EPSS probability
- 0.34%
- CWE
- CWE-212
- Published
- 2026-05-07
- Last modified
- 2026-05-07
Affected products
- PHOENIX CONTACT FL MGUARD 2102
- PHOENIX CONTACT FL MGUARD 2105
- PHOENIX CONTACT FL MGUARD 4102 PCI
- PHOENIX CONTACT FL MGUARD 4102 PCIE
- PHOENIX CONTACT FL MGUARD 4302
- PHOENIX CONTACT FL MGUARD 4305
- PHOENIX CONTACT FL MGUARD CENTERPORT VPN-1000
- PHOENIX CONTACT FL MGUARD CORE TX
Weakness type
Related vulnerabilities
- CVE-2026-86740 — Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
- CVE-2026-82069 — Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router
- CVE-2026-53604 — nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
- CVE-2026-78658 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability
- CVE-2026-85094 — The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin...
- CVE-2026-62900 — .NET Information Disclosure Vulnerability
- CVE-2024-5300 — AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd
- CVE-2026-15811 — Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes