VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Nov 10, 2021· Updated Jun 17, 2026

CVE-2021-34582

CVE-2021-34582

Description

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Phoenixcontact/Fl Mguard 1102 Firmware3 versions
    cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:phoenixcontact:fl_mguard_1102_firmware:1.5.0:*:*:*:*:*:*:*
  • Phoenixcontact/Fl Mguard 1105 Firmware3 versions
    cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:phoenixcontact:fl_mguard_1105_firmware:1.5.0:*:*:*:*:*:*:*
  • Phoenixcontact/Fl Mguard Dmllm-fuzzy2 versions
    1.4.0, 1.4.1, 1.5.0+ 1 more
    • (no CPE)range: 1.4.0, 1.4.1, 1.5.0
    • (no CPE)range: 1.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.