CVE-2025-41697CWE-1299

CVE-2025-41697

Medium · published December 9, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-1299 · Missing Protection Mechanism for Alternate Hardware Interface
Published
2025-12-09T21:17Z
Affected products (69)
ProductVersionsFixed in
phoenixcontact/fl_switch_2708_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2708_firmware< 3.503.50
phoenixcontact/fl_switch_2608_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2608_firmware< 3.503.50
phoenixcontact/fl_switch_2516_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2516_firmware< 3.503.50
phoenixcontact/fl_switch_2514-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2514-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2512-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2508_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2508\/k1_firmware< 3.503.50
phoenixcontact/fl_switch_2508_firmware< 3.503.50
phoenixcontact/fl_switch_2506-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2506-2sfp\/k1_firmware< 3.503.50
phoenixcontact/fl_switch_2506-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2504-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2416_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2416_firmware< 3.503.50
phoenixcontact/fl_switch_2414-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2414-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2412-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2408_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2408_firmware< 3.503.50
phoenixcontact/fl_switch_2406-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2406-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2404-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2316_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2316\/k1_firmware< 3.503.50
phoenixcontact/fl_switch_2316_firmware< 3.503.50
phoenixcontact/fl_switch_2314-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2314-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2312-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2308_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2308_firmware< 3.503.50
phoenixcontact/fl_switch_2306-2sfp_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2306-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2304-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_switch_2303-8sp1< 3.503.50
phoenixcontact/fl_switch_2216_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2216_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2fx_sm_firmware< 3.503.50
phoenixcontact/fl_switch_2214-2fx_firmware< 3.503.50
phoenixcontact/fl_switch_2212-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2208c_firmware< 3.503.50
phoenixcontact/fl_switch_2208_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2208_firmware< 3.503.50
phoenixcontact/fl_switch_2207-fx_sm_firmware< 3.503.50
phoenixcontact/fl_switch_2207-fx_firmware< 3.503.50
phoenixcontact/fl_switch_2206c-2fx_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2sfx_pn_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_st_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_sm_st_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_sm_firmware< 3.503.50
phoenixcontact/fl_switch_2206-2fx_firmware< 3.503.50
phoenixcontact/fl_switch_2205_firmware< 3.503.50
phoenixcontact/fl_switch_2204-2tc-2sfx_firmware< 3.503.50
phoenixcontact/fl_switch_2116_firmware< 3.503.50
phoenixcontact/fl_switch_2108_firmware< 3.503.50
phoenixcontact/fl_switch_2105_firmware< 3.503.50
phoenixcontact/fl_switch_2016_firmware< 3.503.50
phoenixcontact/fl_switch_2008f_firmware< 3.503.50
phoenixcontact/fl_switch_2008_firmware< 3.503.50
phoenixcontact/fl_switch_2005_firmware< 3.503.50
phoenixcontact/fl_nat_2304-2gc-2sfp_firmware< 3.503.50
phoenixcontact/fl_nat_2208_firmware< 3.503.50
phoenixcontact/fl_nat_2008_firmware< 3.503.50
References (1)
EPSS history
Timeline
  • 09 DEC 08:12Z
    Shell access to UART Console
    cvelistv5