medium4.6
CVE-2025-41696
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access…
Impact
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Switch 2708 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2708 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2514-2sfp Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2514-2sfp Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2512-2gc-2sfp Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508\/K1 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508 Firmware | before 3.50 |