CVE-2025-41693

published 2025-12-09

CVE-2025-41693: A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a…

Priority P4 24 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I N A L

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

Affected

138 ranges · showing 25

Vendor	Product	Version range	Fixed in
phoenix_contact	fl_nat_2008	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_nat_2208	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_nat_2304-2gc-2sfp	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2005	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2008	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2008f	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2016	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2105	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2108	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2116	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2204-2tc-2sfx	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2205	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206-2fx	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206-2fx_sm	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206-2fx_sm_st	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206-2fx_st	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206-2sfx	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206-2sfx_pn	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2206c-2fx	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2207-fx	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2207-fx_sm	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2208	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2208_pn	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2208c	>= 0.0.0 < 3.50	3.50
phoenix_contact	fl_switch_2212-2tc-2sfx	>= 0.0.0 < 3.50	3.50

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770