CVE-2025-41696
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
- CVSS 3.1
- 4.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-25)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:fl_nat_2008_firmware
- phoenixcontact:fl_nat_2208_firmware
- phoenixcontact:fl_nat_2304-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2005_firmware
- phoenixcontact:fl_switch_2008_firmware
- phoenixcontact:fl_switch_2008f_firmware
- phoenixcontact:fl_switch_2016_firmware
- phoenixcontact:fl_switch_2105_firmware
- phoenixcontact:fl_switch_2108_firmware
- phoenixcontact:fl_switch_2116_firmware
- phoenixcontact:fl_switch_2204-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2205_firmware
- phoenixcontact:fl_switch_2206-2fx_firmware
- phoenixcontact:fl_switch_2206-2fx_sm_firmware
- phoenixcontact:fl_switch_2206-2fx_sm_st_firmware
- phoenixcontact:fl_switch_2206-2fx_st_firmware
- phoenixcontact:fl_switch_2206-2sfx_firmware
- phoenixcontact:fl_switch_2206-2sfx_pn_firmware
- phoenixcontact:fl_switch_2206c-2fx_firmware
- phoenixcontact:fl_switch_2207-fx_firmware
- phoenixcontact:fl_switch_2207-fx_sm_firmware
- phoenixcontact:fl_switch_2208_firmware
- phoenixcontact:fl_switch_2208_pn_firmware
- phoenixcontact:fl_switch_2208c_firmware
- phoenixcontact:fl_switch_2212-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2214-2fx_firmware
- phoenixcontact:fl_switch_2214-2fx_sm_firmware
- phoenixcontact:fl_switch_2214-2sfx_firmware
- phoenixcontact:fl_switch_2214-2sfx_pn_firmware
- phoenixcontact:fl_switch_2216_firmware
- phoenixcontact:fl_switch_2216_pn_firmware
- phoenixcontact:fl_switch_2303-8sp1
- phoenixcontact:fl_switch_2304-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2306-2sfp_firmware
- phoenixcontact:fl_switch_2306-2sfp_pn_firmware
- phoenixcontact:fl_switch_2308_firmware
- phoenixcontact:fl_switch_2308_pn_firmware
- phoenixcontact:fl_switch_2312-2gc-2sfp_firmware
- phoenixcontact:fl_switch_2314-2sfp_firmware
- phoenixcontact:fl_switch_2314-2sfp_pn_firmware
- phoenixcontact:fl_switch_2316\/k1_firmware
- phoenixcontact:fl_switch_2316_firmware
- phoenixcontact:fl_switch_2316_pn_firmware
- phoenixcontact:fl_switch_2404-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2406-2sfx_firmware
- phoenixcontact:fl_switch_2406-2sfx_pn_firmware
- phoenixcontact:fl_switch_2408_firmware
- phoenixcontact:fl_switch_2408_pn_firmware
- phoenixcontact:fl_switch_2412-2tc-2sfx_firmware
- phoenixcontact:fl_switch_2414-2sfx_firmware