← Database
CVE-2025-41692
MEDIUM
CVSS: 6.8
Published: 2025-12-09
Modified: 2026-06-17
Description
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.
Affected Platforms
Phoenixcontact Fl Switch 2408Phoenixcontact Fl Switch 2406-2Sfx Pn FirmwarePhoenixcontact Fl Switch 2306-2Sfp Pn FirmwarePhoenixcontact Fl Switch 2304-2Gc-2SfpPhoenixcontact Fl Switch 2416 Pn FirmwarePhoenixcontact Fl Switch 2508\/K1Phoenixcontact Fl Switch 2214-2Fx Sm FirmwarePhoenixcontact Fl Nat 2208Phoenixcontact Fl Switch 2116Phoenixcontact Fl Switch 2408 Pn Firmware