CVE-2025-41752

Published: Dec 9, 2025Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.7

Source: info@cert.vde.com (Secondary)

Description

An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.

Affected (69)

Phoenixcontact

69 products

Fl Nat 2008 Firmware

Fl Nat 2208 Firmware

Fl Nat 2304 2gc 2sfp Firmware

Fl Switch 2005 Firmware

Fl Switch 2008 Firmware

Fl Switch 2008f Firmware

Fl Switch 2016 Firmware

Fl Switch 2105 Firmware

Fl Switch 2108 Firmware

Fl Switch 2116 Firmware

Fl Switch 2204 2tc 2sfx Firmware

Fl Switch 2205 Firmware

Fl Switch 2206 2fx Firmware

Fl Switch 2206 2fx Sm Firmware

Fl Switch 2206 2fx Sm St Firmware

Fl Switch 2206 2fx St Firmware

Fl Switch 2206 2sfx Firmware

Fl Switch 2206 2sfx Pn Firmware

Fl Switch 2206c 2fx Firmware

Fl Switch 2207 Fx Firmware

Fl Switch 2207 Fx Sm Firmware

Fl Switch 2208 Firmware

Fl Switch 2208 Pn Firmware

Fl Switch 2208c Firmware

Fl Switch 2212 2tc 2sfx Firmware

Fl Switch 2214 2fx Firmware

Fl Switch 2214 2fx Sm Firmware

Fl Switch 2214 2sfx Firmware

Fl Switch 2214 2sfx Pn Firmware

Fl Switch 2216 Firmware

Fl Switch 2216 Pn Firmware

Fl Switch 2303 8sp1

Fl Switch 2304 2gc 2sfp Firmware

Fl Switch 2306 2sfp Firmware

Fl Switch 2306 2sfp Pn Firmware

Fl Switch 2308 Firmware

Fl Switch 2308 Pn Firmware

Fl Switch 2312 2gc 2sfp Firmware

Fl Switch 2314 2sfp Firmware

Fl Switch 2314 2sfp Pn Firmware

Fl Switch 2316 Firmware

Fl Switch 2316/k1 Firmware

Fl Switch 2316 Pn Firmware

Fl Switch 2404 2tc 2sfx Firmware

Fl Switch 2406 2sfx Firmware

Fl Switch 2406 2sfx Pn Firmware

Fl Switch 2408 Firmware

Fl Switch 2408 Pn Firmware

Fl Switch 2412 2tc 2sfx Firmware

Fl Switch 2414 2sfx Firmware

Fl Switch 2414 2sfx Pn Firmware

Fl Switch 2416 Firmware

Fl Switch 2416 Pn Firmware

Fl Switch 2504 2gc 2sfp Firmware

Fl Switch 2506 2sfp Firmware

Fl Switch 2506 2sfp/k1 Firmware

Fl Switch 2506 2sfp Pn Firmware

Fl Switch 2508 Firmware

Fl Switch 2508/k1 Firmware

Fl Switch 2508 Pn Firmware

Fl Switch 2512 2gc 2sfp Firmware

Fl Switch 2514 2sfp Firmware

Fl Switch 2514 2sfp Pn Firmware

Fl Switch 2516 Firmware

Fl Switch 2516 Pn Firmware

Fl Switch 2608 Firmware

Fl Switch 2608 Pn Firmware

Fl Switch 2708 Firmware

Fl Switch 2708 Pn Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Nat 2008 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Nat 2008	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Nat 2208 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Nat 2208	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Nat 2304 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Nat 2304 2gc 2sfp	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2005 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2005	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2008 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2008	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2008f Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2008f	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2016 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2016	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2105 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2105	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2108 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2108	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2116 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2116	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2204 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2204 2tc 2sfx	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2205 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2205	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx Sm Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx Sm	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx Sm St Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx Sm St	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2fx St Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2fx St	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2sfx	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206 2sfx Pn	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2206c 2fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2206c 2fx	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2207 Fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2207 Fx	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2207 Fx Sm Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2207 Fx Sm	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2208 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2208	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2208 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2208 Pn	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2208c Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2208c	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2212 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2212 2tc 2sfx	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2fx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2fx	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2fx Sm Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2fx Sm	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2sfx	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2214 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2214 2sfx Pn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2216 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2216	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2216 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2216 Pn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2303 8sp1	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2303 8sp1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2304 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2304 2gc 2sfp	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2306 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2306 2sfp	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2306 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2306 2sfp Pn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2308 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2308	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2308 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2308 Pn	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2312 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2312 2gc 2sfp	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2314 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2314 2sfp	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2314 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2314 2sfp Pn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2316 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2316	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2316/k1 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2316/k1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2316 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2316 Pn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2404 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2404 2tc 2sfx	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2406 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2406 2sfx	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2406 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2406 2sfx Pn	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2408 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2408	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2408 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2408 Pn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2412 2tc 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2412 2tc 2sfx	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2414 2sfx Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2414 2sfx	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2414 2sfx Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2414 2sfx Pn	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2416 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2416	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2416 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2416 Pn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2504 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2504 2gc 2sfp	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2506 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2506 2sfp	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2506 2sfp/k1 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2506 2sfp/k1	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2506 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2506 2sfp Pn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2508 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2508	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2508/k1 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2508/k1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2508 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2508 Pn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2512 2gc 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2512 2gc 2sfp	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2514 2sfp Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2514 2sfp	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2514 2sfp Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2514 2sfp Pn	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2516 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2516	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2516 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2516 Pn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2608 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2608	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2608 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2608 Pn	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2708 Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2708	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 2708 Pn Firmware	Before 3.50

Running on/with	Platform Versions
Phoenixcontact Fl Switch 2708 Pn	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (1)

https://certvde.com/en/advisories/VDE-2025-071/

Source: info@cert.vde.com

Vendor Advisory

Timeline

No history available yet.