CVE-2024-43384

High

Description

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.

SeverityHigh
CVSS8.0
Exploit probability—
ProductPhoenixcontact Fl Mguard 2102 Firmware
PublishedMay 7, 2026
First seenMay 7, 2026
Weakness typeCWE-212CWE-212

How to fix

Update
  • phoenixcontact fl_mguard_2102_firmware10.4.1 or later
  • phoenixcontact fl_mguard_2105_firmware10.4.1 or later
  • phoenixcontact fl_mguard_4102_pci_firmware10.4.1 or later
  • phoenixcontact fl_mguard_4102_pcie_firmware10.4.1 or later
  • phoenixcontact fl_mguard_4302_firmware10.4.1 or later
  • phoenixcontact fl_mguard_4305_firmware10.4.1 or later
  • phoenixcontact fl_mguard_centerport_firmware8.9.3 or later
  • phoenixcontact fl_mguard_centerport_vpn-1000_firmware8.9.3 or later
  • phoenixcontact fl_mguard_core_tx_firmware8.9.3 or later
  • phoenixcontact fl_mguard_core_tx_vpn_firmware8.9.3 or later
  • phoenixcontact fl_mguard_delta_tx\/tx_firmware8.9.3 or later
  • phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmware8.9.3 or later

Affected products

ProductAffected versionsFixed in
phoenixcontact fl_mguard_2102_firmwarev < 10.4.110.4.1
phoenixcontact fl_mguard_2105_firmwarev < 10.4.110.4.1
phoenixcontact fl_mguard_4102_pci_firmwarev < 10.4.110.4.1
phoenixcontact fl_mguard_4102_pcie_firmwarev < 10.4.110.4.1
phoenixcontact fl_mguard_4302_firmwarev < 10.4.110.4.1
phoenixcontact fl_mguard_4305_firmwarev < 10.4.110.4.1
phoenixcontact fl_mguard_centerport_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_centerport_vpn-1000_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_core_tx_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_core_tx_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_delta_tx\/tx_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_gt\/gt_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_gt\/gt_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_pci4000_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_pci4000_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_pcie4000_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_pcie4000_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs2000_tx\/tx_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs2000_tx\/tx-b_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs2005_tx_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx-m_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx-p_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs4004_tx\/dtx_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_smart2_firmwarev < 8.9.38.9.3
phoenixcontact fl_mguard_smart2_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs2000_3g_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs2000_4g_att_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs2000_4g_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs2000_4g_vzw_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs4000_3g_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs4000_4g_att_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs4000_4g_vpn_firmwarev < 8.9.38.9.3
phoenixcontact tc_mguard_rs4000_4g_vzw_vpn_firmwarev < 8.9.38.9.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.