This vulnerability (CVE-2024-43384) affects PHOENIX CONTACT FL MGUARD 2102 and involves improper removal of sensitive information before storage or transfer (CWE-212). A low privileged remote attacker can leverage this flaw to gain access to the root password, potentially leading to full system compromise. The CVSS 3.1 score of 8.0 indicates high impact with network attack vector, low attack complexity, requiring low privileges but user interaction, and resulting in high confidentiality, integrity, and availability impacts. No patch or official remediation level has been disclosed by the vendor as of the publication date.

An attacker with low privileges and remote access can obtain the root password due to the improper handling of sensitive information. This could lead to full control over the affected device, compromising confidentiality, integrity, and availability of the system. The high CVSS score reflects the critical nature of this impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the affected device and monitor for suspicious activity. Avoid exposing the device to untrusted networks. Follow vendor channels for updates on patches or mitigations.