CVE-2025-41693CWE-770denial-of-service

CVE-2025-41693

Medium · published December 9, 2025

CVSS v3.1
4.3
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-12-09T21:17Z
Affected products (69)
ProductVersionsFixed in
phoenixcontact/fl_switch_2708_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2708_firmware< 3.503.50
phoenixcontact/fl_switch_2608_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2608_firmware< 3.503.50
phoenixcontact/fl_switch_2516_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2516_firmware< 3.503.50
phoenixcontact/fl_switch_2514-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2514-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2512-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2508_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2508\/k1_firmware< 3.503.50
phoenixcontact/fl_switch_2508_firmware< 3.503.50
phoenixcontact/fl_switch_2506-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2506-2sfp\/k1_firmware< 3.503.50
phoenixcontact/fl_switch_2506-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2504-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2416_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2416_firmware< 3.503.50
phoenixcontact/fl_switch_2414-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2414-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2412-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2408_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2408_firmware< 3.503.50
phoenixcontact/fl_switch_2406-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2406-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2404-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2316_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2316\/k1_firmware< 3.503.50
phoenixcontact/fl_switch_2316_firmware< 3.503.50
phoenixcontact/fl_switch_2314-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2314-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2312-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2308_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2308_firmware< 3.503.50
phoenixcontact/fl_switch_2306-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2306-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2304-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2303-8sp1< 3.503.50
phoenixcontact/fl_switch_2216_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2216_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2fx_sm_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2fx_firmware< 3.503.50
phoenixcontact/fl_switch_2212-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2208c_firmware< 3.503.50
phoenixcontact/fl_switch_2208_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2208_firmware< 3.503.50
phoenixcontact/fl_switch_2207-fx_sm_firmware< 3.503.50
phoenixcontact/fl_switch_2207-fx_firmware< 3.503.50
phoenixcontact/fl_switch_2206c-2fx_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_st_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_sm_st_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_sm_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_firmware< 3.503.50
phoenixcontact/fl_switch_2205_firmware< 3.503.50
phoenixcontact/fl_switch_2204-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2116_firmware< 3.503.50
phoenixcontact/fl_switch_2108_firmware< 3.503.50
phoenixcontact/fl_switch_2105_firmware< 3.503.50
phoenixcontact/fl_switch_2016_firmware< 3.503.50
phoenixcontact/fl_switch_2008f_firmware< 3.503.50
phoenixcontact/fl_switch_2008_firmware< 3.503.50
phoenixcontact/fl_switch_2005_firmware< 3.503.50
phoenixcontact/fl_nat_2304-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_nat_2208_firmware< 3.503.50
phoenixcontact/fl_nat_2008_firmware< 3.503.50
References (1)
EPSS history
Timeline
  • 09 DEC 08:13Z
    Authenticated Denial-of-Service via SSH
    cvelistv5