Vulnerability Details CVE-2021-34582
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.4%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
Products affected by CVE-2021-34582
-
cpe:2.3:h:phoenixcontact:fl_mguard_1102:-
-
cpe:2.3:h:phoenixcontact:fl_mguard_1105:-
-
cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.0
-
cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.1
-
cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.5.0
-
cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.0
-
cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.1
-
cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.5.0