← Database
CVE-2025-41696
MEDIUM
CVSS: 4.6
Published: 2025-12-09
Modified: 2026-06-17
Description
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
Affected Platforms
Phoenixcontact Fl Switch 2408Phoenixcontact Fl Switch 2406-2Sfx Pn FirmwarePhoenixcontact Fl Switch 2306-2Sfp Pn FirmwarePhoenixcontact Fl Switch 2304-2Gc-2SfpPhoenixcontact Fl Switch 2416 Pn FirmwarePhoenixcontact Fl Switch 2508\/K1Phoenixcontact Fl Switch 2214-2Fx Sm FirmwarePhoenixcontact Fl Nat 2208Phoenixcontact Fl Switch 2116Phoenixcontact Fl Switch 2408 Pn Firmware