medium6.8
CVE-2025-41692
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak passwo…
Impact
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Switch 2708 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2708 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2208c Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2208 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2208 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2207-Fx Sm Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2207-Fx Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2206c-2fx Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2206-2sfx Pn Firmware | before 3.50 |