← Database
CVE-2025-41694
MEDIUM
CVSS: 6.5
Published: 2025-12-09
Modified: 2026-06-17
Description
A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.
Affected Platforms
Phoenixcontact Fl Switch 2408Phoenixcontact Fl Switch 2406-2Sfx Pn FirmwarePhoenixcontact Fl Switch 2306-2Sfp Pn FirmwarePhoenixcontact Fl Switch 2304-2Gc-2SfpPhoenixcontact Fl Switch 2416 Pn FirmwarePhoenixcontact Fl Switch 2508\/K1Phoenixcontact Fl Switch 2214-2Fx Sm FirmwarePhoenixcontact Fl Nat 2208Phoenixcontact Fl Switch 2116Phoenixcontact Fl Switch 2408 Pn Firmware