{"id":"CVE-2024-43384","aliases":["EUVD-2024-55567","GHSA-wqgp-h8fj-p489"],"status":"published","title":"Phoenix Contact: Improper removal of sensitive information in MGUARD products","description":"A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0034,"percentile":0.27613,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-212"],"published":"2026-05-07T08:37:04Z","modified":"2026-10-27T18:10:00Z","products":[{"vendor":"phoenix contact","product":"fl mguard 2102"},{"vendor":"phoenix contact","product":"fl mguard 2105"},{"vendor":"phoenix contact","product":"fl mguard 4102 pci"},{"vendor":"phoenix contact","product":"fl mguard 4102 pcie"},{"vendor":"phoenix contact","product":"fl mguard 4302"},{"vendor":"phoenix contact","product":"fl mguard 4305"},{"vendor":"phoenix contact","product":"fl mguard centerport vpn-1000"},{"vendor":"phoenix contact","product":"fl mguard core tx"},{"vendor":"phoenix contact","product":"fl mguard core tx vpn"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx"},{"vendor":"phoenix contact","product":"fl mguard delta tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard gt/gt"},{"vendor":"phoenix contact","product":"fl mguard gt/gt vpn"},{"vendor":"phoenix contact","product":"fl mguard pci4000"},{"vendor":"phoenix contact","product":"fl mguard pci4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard pcie4000"},{"vendor":"phoenix contact","product":"fl mguard pcie4000 vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs2000 tx/tx-b"},{"vendor":"phoenix contact","product":"fl mguard rs2005 tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx vpn"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-m"},{"vendor":"phoenix contact","product":"fl mguard rs4000 tx/tx-p"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx"},{"vendor":"phoenix contact","product":"fl mguard rs4004 tx/dtx vpn"},{"vendor":"phoenix contact","product":"fl mguard smart2"},{"vendor":"phoenix contact","product":"fl mguard smart2 vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs2000 4g vzw vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 3g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g att vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vpn"},{"vendor":"phoenix contact","product":"tc mguard rs4000 4g vzw vpn"},{"vendor":"phoenixcontact","product":"fl_mguard_2102_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_2105_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pci_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4102_pcie_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4302_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_4305_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_centerport_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_centerport_vpn-1000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_core_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_delta_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_gt\\/gt_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pci4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_pcie4000_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx-b_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs2005_tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-m_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx-p_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4000_tx\\/tx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_rs4004_tx\\/dtx_vpn_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_firmware"},{"vendor":"phoenixcontact","product":"fl_mguard_smart2_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs2000_4g_vzw_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_3g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_att_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vpn_firmware"},{"vendor":"phoenixcontact","product":"tc_mguard_rs4000_4g_vzw_vpn_firmware"}],"references":[{"url":"https://certvde.com/en/advisories/VDE-2024-039","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43384"},{"url":"https://github.com/advisories/GHSA-wqgp-h8fj-p489"}],"sources":{"cve":[{"id":"CVE-2024-43384","title":"Phoenix Contact: Improper removal of sensitive information in MGUARD products","description":"A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.","status":"published","published":"2026-05-07T08:37:04.384Z","modified":"2026-05-07T14:32:39.199Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:33:58.357949Z"}],"euvd":[{"id":"EUVD-2024-55567","description":"A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.","status":"published","published":"2026-05-07T08:37:04Z","modified":"2026-05-07T14:32:39Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:05:14.902845Z"}],"ghsa":[{"id":"GHSA-wqgp-h8fj-p489","title":"A low privileged remote attacker can gain the root password due to improper removal of sensitive...","description":"A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.","status":"published","published":"2026-05-07T09:31:26Z","modified":"2026-05-07T09:31:32Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T15:07:56.440319Z"}],"nvd":[{"id":"CVE-2024-43384","description":"A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.","status":"published","published":"2026-05-07T09:16:24.873Z","modified":"2026-10-27T18:10:00.13Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:10:47.77313Z"}]}}