high
CVSS: 8/10
14/05/2026
Vulnérabilité high détectée - CVE-2024-43384
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
CVE concernées (1)
Systèmes affectés
- fl_mguard_2102
- fl_mguard_2102_firmware
- fl_mguard_2105
- fl_mguard_2105_firmware
- fl_mguard_4102_pci
- fl_mguard_4102_pci_firmware
- fl_mguard_4102_pcie
- fl_mguard_4102_pcie_firmware
- fl_mguard_4302
- fl_mguard_4302_firmware
- fl_mguard_4305
- fl_mguard_4305_firmware
- fl_mguard_centerport
- fl_mguard_centerport_firmware
- fl_mguard_centerport_vpn-1000
- fl_mguard_centerport_vpn-1000_firmware
- fl_mguard_core_tx
- fl_mguard_core_tx_firmware
- fl_mguard_core_tx_vpn
- fl_mguard_core_tx_vpn_firmware
- fl_mguard_delta_tx\/tx
- fl_mguard_delta_tx\/tx_firmware
- fl_mguard_delta_tx\/tx_vpn
- fl_mguard_delta_tx\/tx_vpn_firmware
- fl_mguard_gt\/gt
- fl_mguard_gt\/gt_firmware
- fl_mguard_gt\/gt_vpn
- fl_mguard_gt\/gt_vpn_firmware
- fl_mguard_pci4000
- fl_mguard_pci4000_firmware
- fl_mguard_pci4000_vpn
- fl_mguard_pci4000_vpn_firmware
- fl_mguard_pcie4000
- fl_mguard_pcie4000_firmware
- fl_mguard_pcie4000_vpn
- fl_mguard_pcie4000_vpn_firmware
- fl_mguard_rs2000_tx\/tx-b
- fl_mguard_rs2000_tx\/tx-b_firmware
- fl_mguard_rs2000_tx\/tx_vpn
- fl_mguard_rs2000_tx\/tx_vpn_firmware
- fl_mguard_rs2005_tx_vpn
- fl_mguard_rs2005_tx_vpn_firmware
- fl_mguard_rs4000_tx\/tx
- fl_mguard_rs4000_tx\/tx-m
- fl_mguard_rs4000_tx\/tx-m_firmware
- fl_mguard_rs4000_tx\/tx-p
- fl_mguard_rs4000_tx\/tx-p_firmware
- fl_mguard_rs4000_tx\/tx_firmware
- fl_mguard_rs4000_tx\/tx_vpn
- fl_mguard_rs4000_tx\/tx_vpn_firmware
- fl_mguard_rs4004_tx\/dtx
- fl_mguard_rs4004_tx\/dtx_firmware
- fl_mguard_rs4004_tx\/dtx_vpn
- fl_mguard_rs4004_tx\/dtx_vpn_firmware
- fl_mguard_smart2
- fl_mguard_smart2_firmware
- fl_mguard_smart2_vpn
- fl_mguard_smart2_vpn_firmware
- phoenixcontact
- tc_mguard_rs2000_3g_vpn
- tc_mguard_rs2000_3g_vpn_firmware
- tc_mguard_rs2000_4g_att_vpn
- tc_mguard_rs2000_4g_att_vpn_firmware
- tc_mguard_rs2000_4g_vpn
- tc_mguard_rs2000_4g_vpn_firmware
- tc_mguard_rs2000_4g_vzw_vpn
- tc_mguard_rs2000_4g_vzw_vpn_firmware
- tc_mguard_rs4000_3g_vpn
- tc_mguard_rs4000_3g_vpn_firmware
- tc_mguard_rs4000_4g_att_vpn
- tc_mguard_rs4000_4g_att_vpn_firmware
- tc_mguard_rs4000_4g_vpn
- tc_mguard_rs4000_4g_vpn_firmware
- tc_mguard_rs4000_4g_vzw_vpn
- tc_mguard_rs4000_4g_vzw_vpn_firmware
Description
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
Type de vulnérabilité
- CWE-212
Vecteur d'attaque
Complexité : LOW
Privilèges requis : LOW
Interaction utilisateur : REQUIRED
Impact
- Confidentialité : HIGH
- Intégrité : HIGH
- Disponibilité : HIGH
Recommandations
Appliquer les correctifs de sécurité fournis par le vendeur dès que possible.
Recommandations de sécurité
- Appliquer immédiatement les correctifs de sécurité
- Surveiller les systèmes pour détecter toute tentative d'exploitation