CVE-2025-41694
A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.
- CVSS 3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-25)
- CWE
- CWE-770
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:fl_nat_2008_firmware
- phoenixcontact:fl_nat_2208_firmware
- phoenixcontact:fl_nat_2304-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2005_firmware
- phoenixcontact:fl_switch_2008_firmware
- phoenixcontact:fl_switch_2008f_firmware
- phoenixcontact:fl_switch_2016_firmware
- phoenixcontact:fl_switch_2105_firmware
- phoenixcontact:fl_switch_2108_firmware
- phoenixcontact:fl_switch_2116_firmware
- phoenixcontact:fl_switch_2204-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2205_firmware
- phoenixcontact:fl_switch_2206-2fx_firmware
- phoenixcontact:fl_switch_2206-2fx_sm_firmware
- phoenixcontact:fl_switch_2206-2fx_sm_st_firmware
- phoenixcontact:fl_switch_2206-2fx_st_firmware
- phoenixcontact:fl_switch_2206-2sfx_firmware
- phoenixcontact:fl_switch_2206-2sfx_pn_firmware
- phoenixcontact:fl_switch_2206c-2fx_firmware
- phoenixcontact:fl_switch_2207-fx_firmware
- phoenixcontact:fl_switch_2207-fx_sm_firmware
- phoenixcontact:fl_switch_2208_firmware
- phoenixcontact:fl_switch_2208_pn_firmware
- phoenixcontact:fl_switch_2208c_firmware
- phoenixcontact:fl_switch_2212-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2214-2fx_firmware
- phoenixcontact:fl_switch_2214-2fx_sm_firmware
- phoenixcontact:fl_switch_2214-2sfx_firmware
- phoenixcontact:fl_switch_2214-2sfx_pn_firmware
- phoenixcontact:fl_switch_2216_firmware
- phoenixcontact:fl_switch_2216_pn_firmware
- phoenixcontact:fl_switch_2303-8sp1
- phoenixcontact:fl_switch_2304-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2306-2sfp_firmware
- phoenixcontact:fl_switch_2306-2sfp_pn_firmware
- phoenixcontact:fl_switch_2308_firmware
- phoenixcontact:fl_switch_2308_pn_firmware
- phoenixcontact:fl_switch_2312-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2314-2sfp_firmware
- phoenixcontact:fl_switch_2314-2sfp_pn_firmware
- phoenixcontact:fl_switch_2316\/k1_firmware
- phoenixcontact:fl_switch_2316_firmware
- phoenixcontact:fl_switch_2316_pn_firmware
- phoenixcontact:fl_switch_2404-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2406-2sfx_firmware
- phoenixcontact:fl_switch_2406-2sfx_pn_firmware
- phoenixcontact:fl_switch_2408_firmware
- phoenixcontact:fl_switch_2408_pn_firmware
- phoenixcontact:fl_switch_2412-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2414-2sfx_firmware