CVE-2025-41697

Published: Dec 9, 2025Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: info@cert.vde.com (Secondary)

Description

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

Affected (69)

Phoenixcontact

69 products

Fl Switch 2708 Pn Firmware

Fl Switch 2708 Firmware

Fl Switch 2608 Pn Firmware

Fl Switch 2608 Firmware

Fl Switch 2516 Pn Firmware

Fl Switch 2516 Firmware

Fl Switch 2514 2sfp Pn Firmware

Fl Switch 2514 2sfp Firmware

Fl Switch 2512 2gc 2sfp Firmware

Fl Switch 2508 Pn Firmware

Fl Switch 2508/k1 Firmware

Fl Switch 2508 Firmware

Fl Switch 2506 2sfp Pn Firmware

Fl Switch 2506 2sfp/k1 Firmware

Fl Switch 2506 2sfp Firmware

Fl Switch 2504 2gc 2sfp Firmware

Fl Switch 2416 Pn Firmware

Fl Switch 2416 Firmware

Fl Switch 2414 2sfx Pn Firmware

Fl Switch 2414 2sfx Firmware

Fl Switch 2412 2tc 2sfx Firmware

Fl Switch 2408 Pn Firmware

Fl Switch 2408 Firmware

Fl Switch 2406 2sfx Pn Firmware

Fl Switch 2406 2sfx Firmware

Fl Switch 2404 2tc 2sfx Firmware

Fl Switch 2316 Pn Firmware

Fl Switch 2316/k1 Firmware

Fl Switch 2316 Firmware

Fl Switch 2314 2sfp Pn Firmware

Fl Switch 2314 2sfp Firmware

Fl Switch 2312 2gc 2sfp Firmware

Fl Switch 2308 Pn Firmware

Fl Switch 2308 Firmware

Fl Switch 2306 2sfp Pn Firmware

Fl Switch 2306 2sfp Firmware

Fl Switch 2304 2gc 2sfp Firmware

Fl Switch 2303 8sp1

Fl Switch 2216 Pn Firmware

Fl Switch 2216 Firmware

Fl Switch 2214 2sfx Pn Firmware

Fl Switch 2214 2sfx Firmware

Fl Switch 2214 2fx Sm Firmware

Fl Switch 2214 2fx Firmware

Fl Switch 2212 2tc 2sfx Firmware

Fl Switch 2208c Firmware

Fl Switch 2208 Pn Firmware

Fl Switch 2208 Firmware

Fl Switch 2207 Fx Sm Firmware

Fl Switch 2207 Fx Firmware

Fl Switch 2206c 2fx Firmware

Fl Switch 2206 2sfx Pn Firmware

Fl Switch 2206 2sfx Firmware

Fl Switch 2206 2fx St Firmware

Fl Switch 2206 2fx Sm St Firmware

Fl Switch 2206 2fx Sm Firmware

Fl Switch 2206 2fx Firmware

Fl Switch 2205 Firmware

Fl Switch 2204 2tc 2sfx Firmware

Fl Switch 2116 Firmware

Fl Switch 2108 Firmware

Fl Switch 2105 Firmware

Fl Switch 2016 Firmware

Fl Switch 2008f Firmware

Fl Switch 2008 Firmware

Fl Switch 2005 Firmware

Fl Nat 2304 2gc 2sfp Firmware

Fl Nat 2208 Firmware

Fl Nat 2008 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2708 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2708 Pn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2708 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2708	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2608 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2608 Pn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2608 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2608	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2516 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2516 Pn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2516 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2516	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2514 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2514 2sfp Pn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2514 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2514 2sfp	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2512 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2512 2gc 2sfp	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2508 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2508 Pn	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2508/k1 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2508/k1	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2508 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2508	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2506 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2506 2sfp Pn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2506 2sfp/k1 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2506 2sfp/k1	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2506 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2506 2sfp	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2504 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2504 2gc 2sfp	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2416 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2416 Pn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2416 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2416	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2414 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2414 2sfx Pn	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2414 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2414 2sfx	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2412 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2412 2tc 2sfx	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2408 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2408 Pn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2408 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2408	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2406 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2406 2sfx Pn	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2406 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2406 2sfx	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2404 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2404 2tc 2sfx	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2316 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2316 Pn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2316/k1 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2316/k1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2316 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2316	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2314 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2314 2sfp Pn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2314 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2314 2sfp	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2312 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2312 2gc 2sfp	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2308 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2308 Pn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2308 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2308	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2306 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2306 2sfp Pn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2306 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2306 2sfp	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2304 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2304 2gc 2sfp	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2303 8sp1	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2303 8sp1	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2216 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2216 Pn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2216 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2216	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2sfx Pn	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2sfx	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2fx Sm Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2fx Sm	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2fx	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2212 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2212 2tc 2sfx	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2208c Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2208c	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2208 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2208 Pn	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2208 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2208	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2207 Fx Sm Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2207 Fx Sm	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2207 Fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2207 Fx	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206c 2fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206c 2fx	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2sfx Pn	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2sfx	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx St Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx St	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx Sm St Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx Sm St	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx Sm Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx Sm	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2205 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2205	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2204 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2204 2tc 2sfx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2116 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2116	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2108 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2108	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2105 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2105	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2016 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2016	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2008f Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2008f	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2008 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2008	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2005 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2005	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Nat 2304 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Nat 2304 2gc 2sfp	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Nat 2208 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Nat 2208	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Nat 2008 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Nat 2008	All versions

Related CWEs

CWE-1299

Missing Protection Mechanism for Alternate Hardware Interface

The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.

References (1)

https://certvde.com/de/advisories/VDE-2025-071

Source: info@cert.vde.com

Third Party Advisory

Timeline

No history available yet.