medium6.8
CVE-2025-41697
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g.
Impact
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Switch 2708 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2708 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2608 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2516 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2514-2sfp Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2514-2sfp Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2512-2gc-2sfp Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508 Pn Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508\/K1 Firmware | before 3.50 |
| Phoenixcontact | Fl Switch 2508 Firmware | before 3.50 |