medium4.8
CVE-2021-34582
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based manageme…
Impact
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Mguard 1102 Firmware | Versions 1.4.0, 1.4.1, 1.5.0 |
| Phoenixcontact | Fl Mguard 1105 Firmware | Versions 1.4.0, 1.4.1, 1.5.0 |