PT-2021-7544 · Phoenix Contact+2 · Fl Mguard Dm+2

Published 2021-08-11 · Updated 2022-11-15 · CVE-2021-34579

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Phoenix Contact: FL MGUARD DM versions 1.12.0 through 1.13.0

Description The issue is related to inadequate access control in the Apache web server installed as part of the FL MGUARD DM on Microsoft Windows. Attackers with network access to the Apache web server can download and read mGuard configuration profiles, also known as "ATV profiles", which may contain sensitive information such as private keys associated with IPsec VPN connections.

Recommendations For versions 1.12.0 and 1.13.0, consider restricting access to the Apache web server to minimize the risk of exploitation. As a temporary workaround, limit the ability to download configuration profiles until a patch is available. Additionally, review and secure any sensitive information stored in the configuration profiles. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2022-07437

CVE-2021-34579

Affected Products

Apache Web Server

Fl Mguard Dm

Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-34579 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34579 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07437 · Security Note
• https://t.me/cibsecurity/52722 · Telegram Post
• https://cert.vde.com/en/advisories/VDE-2021-035 · Note