medium4.3
CVE-2025-41693
A low privileged remote attacker can use the ssh feature to execute commands directly after login.
Impact
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Switch 2708 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2708 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2514-2sfp Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2514-2sfp Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2512-2gc-2sfp Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508\/K1 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508 Firmware | before 3.50 |