Phoenix Contact Fl Switch 2406-2Sfx vulnerabilities
22 known vulnerabilities affecting phoenix_contact/fl_switch_2406-2sfx.
Total CVEs
22
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH12MEDIUM10
Vulnerabilities
Page 2 of 2
CVE-2025-41697MEDIUMCVSS 6.8≥ 0.0.0, < 3.502025-12-09
CVE-2025-41697 [MEDIUM] CWE-1299 Shell access to UART Console
Shell access to UART Console
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
cvelistv5
CVE-2025-41696MEDIUMCVSS 6.8≥ 0.0.0, < 3.502025-12-09
CVE-2025-41696 [MEDIUM] CWE-798 Hardcoded User Password
Hardcoded User Password
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
cvelistv5
← Previous2 / 2