This vulnerability (CVE-2024-43384) affects PHOENIX CONTACT FL MGUARD 2102 devices and involves improper removal of sensitive information, specifically the root password, before storage or transfer. A low privileged remote attacker can leverage this flaw to gain root credentials, potentially leading to full system compromise. The issue is categorized as CWE-212, which concerns the failure to properly clear sensitive data from memory or storage. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires some user interaction. The impact is high across confidentiality, integrity, and availability. No patch or official fix has been published yet, and the vendor has not provided remediation details.

An attacker with low privileges and remote access can obtain the root password, which could allow full administrative control over the affected device. This compromises confidentiality, integrity, and availability of the system. The high CVSS score reflects the critical nature of gaining root access remotely. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device to trusted users only and monitor for unusual activity. Avoid exposing the device to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.