← Database
CVE-2025-41697
MEDIUM
CVSS: 6.8
Published: 2025-12-09
Modified: 2026-06-17
Description
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
Affected Platforms
Phoenixcontact Fl Switch 2408Phoenixcontact Fl Switch 2406-2Sfx Pn FirmwarePhoenixcontact Fl Switch 2306-2Sfp Pn FirmwarePhoenixcontact Fl Switch 2304-2Gc-2SfpPhoenixcontact Fl Switch 2416 Pn FirmwarePhoenixcontact Fl Switch 2508\/K1Phoenixcontact Fl Switch 2214-2Fx Sm FirmwarePhoenixcontact Fl Nat 2208Phoenixcontact Fl Switch 2116Phoenixcontact Fl Switch 2408 Pn Firmware