CVEvulnerability
CVE-2025-41697
6.8 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-12-09
- Last modified
- 2026-10-07
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-1299
Description
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
Affected configurations
• phoenixcontact fl switch 2708 pn firmware (< 3.50)
• phoenixcontact fl switch 2708 firmware (< 3.50)
• phoenixcontact fl switch 2608 pn firmware (< 3.50)
• phoenixcontact fl switch 2608 firmware (< 3.50)
• phoenixcontact fl switch 2516 pn firmware (< 3.50)
• phoenixcontact fl switch 2516 firmware (< 3.50)
• phoenixcontact fl switch 2514-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2514-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2512-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2508 pn firmware (< 3.50)
• phoenixcontact fl switch 2508\/k1 firmware (< 3.50)
• phoenixcontact fl switch 2508 firmware (< 3.50)
• phoenixcontact fl switch 2506-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2506-2sfp\/k1 firmware (< 3.50)
• phoenixcontact fl switch 2506-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2504-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2416 pn firmware (< 3.50)
• phoenixcontact fl switch 2416 firmware (< 3.50)
• phoenixcontact fl switch 2414-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2414-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2412-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2408 pn firmware (< 3.50)
• phoenixcontact fl switch 2408 firmware (< 3.50)
• phoenixcontact fl switch 2406-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2406-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2404-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2316 pn firmware (< 3.50)
• phoenixcontact fl switch 2316\/k1 firmware (< 3.50)
• phoenixcontact fl switch 2316 firmware (< 3.50)
• phoenixcontact fl switch 2314-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2314-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2312-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2308 pn firmware (< 3.50)
• phoenixcontact fl switch 2308 firmware (< 3.50)
• phoenixcontact fl switch 2306-2sfp pn firmware (< 3.50)
• phoenixcontact fl switch 2306-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2304-2gc-2sfp firmware (< 3.50)
• phoenixcontact fl switch 2303-8sp1 (< 3.50)
• phoenixcontact fl switch 2216 pn firmware (< 3.50)
• phoenixcontact fl switch 2216 firmware (< 3.50)
• phoenixcontact fl switch 2214-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2214-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2214-2fx sm firmware (< 3.50)
• phoenixcontact fl switch 2214-2fx firmware (< 3.50)
• phoenixcontact fl switch 2212-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2208c firmware (< 3.50)
• phoenixcontact fl switch 2208 pn firmware (< 3.50)
• phoenixcontact fl switch 2208 firmware (< 3.50)
• phoenixcontact fl switch 2207-fx sm firmware (< 3.50)
• phoenixcontact fl switch 2207-fx firmware (< 3.50)
• phoenixcontact fl switch 2206c-2fx firmware (< 3.50)
• phoenixcontact fl switch 2206-2sfx pn firmware (< 3.50)
• phoenixcontact fl switch 2206-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx st firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx sm st firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx sm firmware (< 3.50)
• phoenixcontact fl switch 2206-2fx firmware (< 3.50)
• phoenixcontact fl switch 2205 firmware (< 3.50)
• phoenixcontact fl switch 2204-2tc-2sfx firmware (< 3.50)
• phoenixcontact fl switch 2116 firmware (< 3.50)
… and 9 more
Related
Weakness · CWE (1)
- CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface weakness
References
- https://certvde.com/de/advisories/VDE-2025-071 Third Party Advisory