CVE-2021-34598CWE-401

Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality

High · published November 10, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00933 · 60.4th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2021-11-10T11:22Z
EPSS history
Timeline
  • 10 NOV 11:22Z
    Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality
    cvelistv5