CVEvulnerability

CVE-2025-41692

6.8 MEDIUM Published 2025-12-09 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2025-12-09
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-916

Description

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

Affected configurations

• phoenixcontact fl switch 2708 pn firmware (< 3.50) • phoenixcontact fl switch 2708 firmware (< 3.50) • phoenixcontact fl switch 2608 pn firmware (< 3.50) • phoenixcontact fl switch 2608 firmware (< 3.50) • phoenixcontact fl switch 2516 pn firmware (< 3.50) • phoenixcontact fl switch 2208c firmware (< 3.50) • phoenixcontact fl switch 2208 pn firmware (< 3.50) • phoenixcontact fl switch 2208 firmware (< 3.50) • phoenixcontact fl switch 2207-fx sm firmware (< 3.50) • phoenixcontact fl switch 2207-fx firmware (< 3.50) • phoenixcontact fl switch 2206c-2fx firmware (< 3.50) • phoenixcontact fl switch 2206-2sfx pn firmware (< 3.50) • phoenixcontact fl switch 2206-2sfx firmware (< 3.50) • phoenixcontact fl switch 2206-2fx st firmware (< 3.50) • phoenixcontact fl switch 2206-2fx sm st firmware (< 3.50) • phoenixcontact fl switch 2206-2fx sm firmware (< 3.50) • phoenixcontact fl switch 2206-2fx firmware (< 3.50) • phoenixcontact fl switch 2205 firmware (< 3.50) • phoenixcontact fl switch 2204-2tc-2sfx firmware (< 3.50) • phoenixcontact fl switch 2116 firmware (< 3.50) • phoenixcontact fl switch 2108 firmware (< 3.50) • phoenixcontact fl switch 2105 firmware (< 3.50) • phoenixcontact fl switch 2016 firmware (< 3.50) • phoenixcontact fl switch 2008f firmware (< 3.50) • phoenixcontact fl switch 2008 firmware (< 3.50) • phoenixcontact fl switch 2005 firmware (< 3.50) • phoenixcontact fl nat 2304-2gc-2sfp firmware (< 3.50) • phoenixcontact fl nat 2208 firmware (< 3.50) • phoenixcontact fl nat 2008 firmware (< 3.50) • phoenixcontact fl switch 2516 firmware (< 3.50) • phoenixcontact fl switch 2514-2sfp pn firmware (< 3.50) • phoenixcontact fl switch 2514-2sfp firmware (< 3.50) • phoenixcontact fl switch 2512-2gc-2sfp firmware (< 3.50) • phoenixcontact fl switch 2508 pn firmware (< 3.50) • phoenixcontact fl switch 2508\/k1 firmware (< 3.50) • phoenixcontact fl switch 2508 firmware (< 3.50) • phoenixcontact fl switch 2506-2sfp pn firmware (< 3.50) • phoenixcontact fl switch 2506-2sfp\/k1 firmware (< 3.50) • phoenixcontact fl switch 2506-2sfp firmware (< 3.50) • phoenixcontact fl switch 2504-2gc-2sfp firmware (< 3.50) • phoenixcontact fl switch 2416 pn firmware (< 3.50) • phoenixcontact fl switch 2416 firmware (< 3.50) • phoenixcontact fl switch 2414-2sfx pn firmware (< 3.50) • phoenixcontact fl switch 2414-2sfx firmware (< 3.50) • phoenixcontact fl switch 2412-2tc-2sfx firmware (< 3.50) • phoenixcontact fl switch 2408 pn firmware (< 3.50) • phoenixcontact fl switch 2408 firmware (< 3.50) • phoenixcontact fl switch 2406-2sfx pn firmware (< 3.50) • phoenixcontact fl switch 2406-2sfx firmware (< 3.50) • phoenixcontact fl switch 2404-2tc-2sfx firmware (< 3.50) • phoenixcontact fl switch 2316 pn firmware (< 3.50) • phoenixcontact fl switch 2316\/k1 firmware (< 3.50) • phoenixcontact fl switch 2316 firmware (< 3.50) • phoenixcontact fl switch 2314-2sfp pn firmware (< 3.50) • phoenixcontact fl switch 2314-2sfp firmware (< 3.50) • phoenixcontact fl switch 2312-2gc-2sfp firmware (< 3.50) • phoenixcontact fl switch 2308 pn firmware (< 3.50) • phoenixcontact fl switch 2308 firmware (< 3.50) • phoenixcontact fl switch 2306-2sfp pn firmware (< 3.50) • phoenixcontact fl switch 2306-2sfp firmware (< 3.50) … and 9 more

Related

Weakness · CWE (1)

  • CWE-916 Use of Password Hash With Insufficient Computational Effort weakness

References