CVE-2025-41692
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.
- CVSS 3.1
- 6.8
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N - EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-25)
- CWE
- CWE-916
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:fl_nat_2008_firmware
- phoenixcontact:fl_nat_2208_firmware
- phoenixcontact:fl_nat_2304-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2005_firmware
- phoenixcontact:fl_switch_2008_firmware
- phoenixcontact:fl_switch_2008f_firmware
- phoenixcontact:fl_switch_2016_firmware
- phoenixcontact:fl_switch_2105_firmware
- phoenixcontact:fl_switch_2108_firmware
- phoenixcontact:fl_switch_2116_firmware
- phoenixcontact:fl_switch_2204-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2205_firmware
- phoenixcontact:fl_switch_2206-2fx_firmware
- phoenixcontact:fl_switch_2206-2fx_sm_firmware
- phoenixcontact:fl_switch_2206-2fx_sm_st_firmware
- phoenixcontact:fl_switch_2206-2fx_st_firmware
- phoenixcontact:fl_switch_2206-2sfx_firmware
- phoenixcontact:fl_switch_2206-2sfx_pn_firmware
- phoenixcontact:fl_switch_2206c-2fx_firmware
- phoenixcontact:fl_switch_2207-fx_firmware
- phoenixcontact:fl_switch_2207-fx_sm_firmware
- phoenixcontact:fl_switch_2208_firmware
- phoenixcontact:fl_switch_2208_pn_firmware
- phoenixcontact:fl_switch_2208c_firmware
- phoenixcontact:fl_switch_2212-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2214-2fx_firmware
- phoenixcontact:fl_switch_2214-2fx_sm_firmware
- phoenixcontact:fl_switch_2214-2sfx_firmware
- phoenixcontact:fl_switch_2214-2sfx_pn_firmware
- phoenixcontact:fl_switch_2216_firmware
- phoenixcontact:fl_switch_2216_pn_firmware
- phoenixcontact:fl_switch_2303-8sp1
- phoenixcontact:fl_switch_2304-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2306-2sfp_firmware
- phoenixcontact:fl_switch_2306-2sfp_pn_firmware
- phoenixcontact:fl_switch_2308_firmware
- phoenixcontact:fl_switch_2308_pn_firmware
- phoenixcontact:fl_switch_2312-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2314-2sfp_firmware
- phoenixcontact:fl_switch_2314-2sfp_pn_firmware
- phoenixcontact:fl_switch_2316\/k1_firmware
- phoenixcontact:fl_switch_2316_firmware
- phoenixcontact:fl_switch_2316_pn_firmware
- phoenixcontact:fl_switch_2404-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2406-2sfx_firmware
- phoenixcontact:fl_switch_2406-2sfx_pn_firmware
- phoenixcontact:fl_switch_2408_firmware
- phoenixcontact:fl_switch_2408_pn_firmware
- phoenixcontact:fl_switch_2412-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2414-2sfx_firmware