CVEvulnerability
CVE-2025-41694
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-12-09
- Last modified
- 2026-10-07
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-770
Description
A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.
Affected configurations
• phoenixcontact fl switch 2708 pn firmware (< 3.50)
• phoenixcontact fl switch 2708 firmware (< 3.50)
• phoenixcontact fl switch 2608 pn firmware (< 3.50)
• phoenixcontact fl switch 2608 firmware (< 3.50)
• phoenixcontact fl switch 2516 pn firmware (< 3.50)
• phoenixcontact fl switch 2208c firmware (< 3.50)
• phoenixcontact fl switch 2208 pn firmware (< 3.50)
• phoenixcontact fl switch 2208 firmware (< 3.50)
• phoenixcontact fl switch 2207-fx sm firmware (< 3.50)
• phoenixcontact fl switch 2207-fx firmware (< 3.50)
• phoenixcontact fl switch 2206c-2fx firmware (< 3.50)
• phoenixcontact fl switch 2206-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2206-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx st firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx sm st firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx sm firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx firmware (< 3.50)
• phoenixcontact fl switch 2205 firmware (< 3.50)
• phoenixcontact fl switch 2204-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2116 firmware (< 3.50)
• phoenixcontact fl switch 2108 firmware (< 3.50)
• phoenixcontact fl switch 2105 firmware (< 3.50)
• phoenixcontact fl switch 2016 firmware (< 3.50)
• phoenixcontact fl switch 2008f firmware (< 3.50)
• phoenixcontact fl switch 2008 firmware (< 3.50)
• phoenixcontact fl switch 2005 firmware (< 3.50)
• phoenixcontact fl nat 2304-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl nat 2208 firmware (< 3.50)
• phoenixcontact fl nat 2008 firmware (< 3.50)
• phoenixcontact fl switch 2516 firmware (< 3.50)
• phoenixcontact fl switch 2514-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2514-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2512-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2508 pn firmware (< 3.50)
• phoenixcontact fl switch 2508\/k1 firmware (< 3.50)
• phoenixcontact fl switch 2508 firmware (< 3.50)
• phoenixcontact fl switch 2506-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2506-2sfp\/k1 firmware (< 3.50)
• phoenixcontact fl switch 2506-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2504-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2416 pn firmware (< 3.50)
• phoenixcontact fl switch 2416 firmware (< 3.50)
• phoenixcontact fl switch 2414-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2414-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2412-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2408 pn firmware (< 3.50)
• phoenixcontact fl switch 2408 firmware (< 3.50)
• phoenixcontact fl switch 2406-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2406-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2404-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2316 pn firmware (< 3.50)
• phoenixcontact fl switch 2316\/k1 firmware (< 3.50)
• phoenixcontact fl switch 2316 firmware (< 3.50)
• phoenixcontact fl switch 2314-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2314-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2312-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2308 pn firmware (< 3.50)
• phoenixcontact fl switch 2308 firmware (< 3.50)
• phoenixcontact fl switch 2306-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2306-2sfp firmware (< 3.50)
… and 9 more
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://certvde.com/de/advisories/VDE-2025-071 Third Party Advisory