CVE-2021-34582: Phoenixcontact Fl Mguard 1102 Firmware

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

Affected products

• Phoenixcontact Fl Mguard 1102 Firmware: version 1.4.0 only; version 1.4.1 only; version 1.5.0 only
• Phoenixcontact Fl Mguard 1105 Firmware: version 1.4.0 only; version 1.4.1 only; version 1.5.0 only

Published 2021-11-10. Last modified 2026-06-17.