Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
AnalysisAI
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-212. A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer. Affected products include: Phoenix Contact Fl Mguard 2102, Phoenix Contact Fl Mguard 2105, Phoenix Contact Fl Mguard 4102 Pci, Phoenix Contact Fl Mguard 4102 Pcie, Phoenix Contact Fl Mguard 4302.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today
EUVD-2024-55567
GHSA-wqgp-h8fj-p489