CVE-2021-34579

In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download and therefore read mGuard configuration profiles (“ATV profiles”). Such configuration profiles may contain sensitive information, e.g. private keys associated with IPsec VPN connections.

• CWE-269

• https://cert.vde.com/en/advisories/VDE-2021-035/Third Party Advisory
• https://cert.vde.com/en/advisories/VDE-2021-035/Third Party Advisory

Published

Nov 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34573In Enbra EWM in Version 1.7.29 together with several tested …5.5
• CVE-2021-34574In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz m…4.3
• CVE-2021-34575In MB connect line mymbCONNECT24, mbCONNECT24 in versions <=…7.5
• CVE-2021-34576In Kaden PICOFLUX Air in all known versions an information e…4.3
• CVE-2021-34577In the Kaden PICOFLUX AiR water meter an adversary can read …6.5
• CVE-2021-34578This vulnerability allows an attacker who has access to the …8.1
• CVE-2021-3458The Motorola MM1000 device configuration portal can be acces…4.6
• CVE-2021-34580In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated us…7.5
• CVE-2021-34581Missing Release of Resource after Effective Lifetime vulnera…7.5
• CVE-2021-34582In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0…4.8
• CVE-2021-34583Crafted web server requests may cause a heap-based buffer ov…7.5
• CVE-2021-34584Crafted web server requests can be utilised to read partial …9.1