🛡️ CVE-2024-43384 — fl-mguard-2102-firmware

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is low, an attacker needs low-level privileges on the target. A user must be tricked into taking some action. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity high, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

• Attack vector: Network — reachable from anywhere that can route to the service.
• Attack complexity: Low — the attack works reliably, with no preparation.
• Privileges required: Low — an ordinary user account is enough.
• User interaction: Required — someone has to click, open or visit something.
• Scope: Unchanged — the damage stays inside the vulnerable component.
• Confidentiality impact: High — total loss, or loss the attacker controls.
• Integrity impact: High — total loss, or loss the attacker controls.
• Availability impact: High — total loss, or loss the attacker controls.

Weakness class

CVE-2024-43384 is classified as CWE-212: Improper Removal of Sensitive Information. Data is passed on without stripping sensitive fields that the recipient should not receive.

Affected software

CVE-2024-43384 is recorded against 37 packages.

• fl-mguard-2102-firmware (fixed in 10.4.1)
• fl-mguard-2105-firmware (fixed in 10.4.1)
• fl-mguard-4102-pci-firmware (fixed in 10.4.1)
• fl-mguard-4102-pcie-firmware (fixed in 10.4.1)
• fl-mguard-4302-firmware (fixed in 10.4.1)
• fl-mguard-4305-firmware (fixed in 10.4.1)
• fl-mguard-centerport-firmware (fixed in 8.9.3)
• fl-mguard-centerport-vpn-1000-firmware (fixed in 8.9.3)
• fl-mguard-core-tx-firmware (fixed in 8.9.3)
• fl-mguard-core-tx-vpn-firmware (fixed in 8.9.3)
• fl-mguard-delta-tx\/tx-firmware (fixed in 8.9.3)
• fl-mguard-delta-tx\/tx-vpn-firmware (fixed in 8.9.3)
• fl-mguard-gt\/gt-firmware (fixed in 8.9.3)
• fl-mguard-gt\/gt-vpn-firmware (fixed in 8.9.3)
• fl-mguard-pci4000-firmware (fixed in 8.9.3)
• fl-mguard-pci4000-vpn-firmware (fixed in 8.9.3)
• fl-mguard-pcie4000-firmware (fixed in 8.9.3)
• fl-mguard-pcie4000-vpn-firmware (fixed in 8.9.3)
• fl-mguard-rs2000-tx\/tx-b-firmware (fixed in 8.9.3)
• fl-mguard-rs2000-tx\/tx-vpn-firmware (fixed in 8.9.3)
• fl-mguard-rs2005-tx-vpn-firmware (fixed in 8.9.3)
• fl-mguard-rs4000-tx\/tx-firmware (fixed in 8.9.3)
• fl-mguard-rs4000-tx\/tx-m-firmware (fixed in 8.9.3)
• fl-mguard-rs4000-tx\/tx-p-firmware (fixed in 8.9.3)

Timeline and source

Published on 7 May 2026 and last revised on 17 June 2026. No public exploit is currently recorded for this entry. Record sourced from NVD.

References

certvde.com

Other advisories for this package

fl-mguard-2102-firmware has other advisories on record. If you are patching this one, these are worth checking on the same host:

• CVE-2024-7699 (8.8 High, published 10 Sep 2024)
• CVE-2024-43387 (8.8 High, published 10 Sep 2024)
• CVE-2024-7698 (5.7 Medium, published 10 Sep 2024)
• CVE-2024-43386 (8.8 High, published 10 Sep 2024)
• CVE-2024-43393 (8.1 High, published 10 Sep 2024)
• CVE-2024-43385 (8.8 High, published 10 Sep 2024)
• CVE-2024-43391 (8.1 High, published 10 Sep 2024)
• CVE-2024-43390 (8.1 High, published 10 Sep 2024)

Same weakness in other software

These advisories are the same class of weakness (CWE-212: Improper Removal of Sensitive Information) in other software:

• CVE-2026-42186 (2.0 Low, published 27 Jul 2026)
• CVE-2026-15811 (5.8 Medium, published 21 Jul 2026)
• CVE-2024-5300 (5.6 Medium, published 21 Jul 2026)
• CVE-2026-53604 (8.0 High, published 14 Jul 2026)
• CVE-2026-54421 (6.8 Medium, published 14 Jun 2026)
• CVE-2026-46657 (7.1 High, published 8 Jun 2026)
• CVE-2026-36178 (4.6 Medium, published 4 Jun 2026)
• CVE-2026-45046 (5.5 Medium, published 27 May 2026)

Details

Affected Packages

References