CVE-2025-41696

published 2025-12-09

CVE-2025-41696: An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access…

Priority P4 21 medium 4.6 CVSS 3.1

AV P AC L PR N UI N S U C H I N A N

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

Affected

69 ranges · showing 25

Vendor	Product	Version range	Fixed in
phoenixcontact	fl_nat_2008_firmware	< 3.50	3.50
phoenixcontact	fl_nat_2208_firmware	< 3.50	3.50
phoenixcontact	fl_nat_2304-2gc-2sfp_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2005_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2008_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2008f_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2016_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2105_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2108_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2116_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2204-2tc-2sfx_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2205_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206-2fx_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206-2fx_sm_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206-2fx_sm_st_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206-2fx_st_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206-2sfx_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206-2sfx_pn_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2206c-2fx_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2207-fx_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2207-fx_sm_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2208_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2208_pn_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2208c_firmware	< 3.50	3.50
phoenixcontact	fl_switch_2212-2tc-2sfx_firmware	< 3.50	3.50

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-798