CVE-2024-43384

HIGH
MEDIUM Priority: 0.03 BB Relevance: 56/100
Published: 2026-05-07 Modified: 2026-10-27 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.

Weakness Classification (1)

Affected Software (37)

VendorProductVersion
phoenixcontact fl_mguard_2102_firmware < 10.4.1
phoenixcontact fl_mguard_2105_firmware < 10.4.1
phoenixcontact fl_mguard_4102_pci_firmware < 10.4.1
phoenixcontact fl_mguard_4102_pcie_firmware < 10.4.1
phoenixcontact fl_mguard_4302_firmware < 10.4.1
phoenixcontact fl_mguard_4305_firmware < 10.4.1
phoenixcontact fl_mguard_centerport_firmware < 8.9.3
phoenixcontact fl_mguard_centerport_vpn-1000_firmware < 8.9.3
phoenixcontact fl_mguard_core_tx_firmware < 8.9.3
phoenixcontact fl_mguard_core_tx_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_delta_tx\/tx_firmware < 8.9.3
phoenixcontact fl_mguard_delta_tx\/tx_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_gt\/gt_firmware < 8.9.3
phoenixcontact fl_mguard_gt\/gt_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_pci4000_firmware < 8.9.3
phoenixcontact fl_mguard_pci4000_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_pcie4000_firmware < 8.9.3
phoenixcontact fl_mguard_pcie4000_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_rs2000_tx\/tx-b_firmware < 8.9.3
phoenixcontact fl_mguard_rs2000_tx\/tx_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_rs2005_tx_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx-m_firmware < 8.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx-p_firmware < 8.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx_firmware < 8.9.3
phoenixcontact fl_mguard_rs4000_tx\/tx_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_rs4004_tx\/dtx_firmware < 8.9.3
phoenixcontact fl_mguard_rs4004_tx\/dtx_vpn_firmware < 8.9.3
phoenixcontact fl_mguard_smart2_firmware < 8.9.3
phoenixcontact fl_mguard_smart2_vpn_firmware < 8.9.3
phoenixcontact tc_mguard_rs2000_3g_vpn_firmware < 8.9.3
Showing 30 of 37 entries

References & Advisories (1)

Bug Bounty Relevance

56 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

8.0 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.34%
Raw Score 0.003400
Percentile 27.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00340
2026-10-28
0.00340

Intelligence Sources

nvd ref →