7.5
CVE-2021-34598
- EPSS 0.27%
- Veröffentlicht 10.11.2021 12:15:16
- Zuletzt bearbeitet 21.11.2024 06:10:47
- Quelle info@cert.vde.com
- Teams Watchlist Login
- Unerledigt Login
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phoenixcontact ≫ Fl Mguard 1102 Firmware Version1.4.0
Phoenixcontact ≫ Fl Mguard 1102 Firmware Version1.4.1
Phoenixcontact ≫ Fl Mguard 1102 Firmware Version1.5.0
Phoenixcontact ≫ Fl Mguard 1105 Firmware Version1.4.0
Phoenixcontact ≫ Fl Mguard 1105 Firmware Version1.4.1
Phoenixcontact ≫ Fl Mguard 1105 Firmware Version1.5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.5 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
| info@cert.vde.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.