Back to CVE records
Medium 6.8Published Dec 9, 2025
CVE-2025-41692A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.
Updated under an hour ago ()
Does this affect you?
It affects phoenixcontact fl_switch_2708_pn_firmware and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.
- CVSS
- 6.8 MEDIUM (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- Weakness (CWE)
- CWE-916
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Oct 7, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
phoenixcontact fl_switch_2708_pn_firmware phoenixcontact:fl_switch_2708_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2708_firmware phoenixcontact:fl_switch_2708_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2608_pn_firmware phoenixcontact:fl_switch_2608_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2608_firmware phoenixcontact:fl_switch_2608_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2516_pn_firmware phoenixcontact:fl_switch_2516_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2208c_firmware phoenixcontact:fl_switch_2208c_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2208_pn_firmware phoenixcontact:fl_switch_2208_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2208_firmware phoenixcontact:fl_switch_2208_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2207-fx_sm_firmware phoenixcontact:fl_switch_2207-fx_sm_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2207-fx_firmware phoenixcontact:fl_switch_2207-fx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206c-2fx_firmware phoenixcontact:fl_switch_2206c-2fx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206-2sfx_pn_firmware phoenixcontact:fl_switch_2206-2sfx_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206-2sfx_firmware phoenixcontact:fl_switch_2206-2sfx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206-2fx_st_firmware phoenixcontact:fl_switch_2206-2fx_st_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206-2fx_sm_st_firmware phoenixcontact:fl_switch_2206-2fx_sm_st_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206-2fx_sm_firmware phoenixcontact:fl_switch_2206-2fx_sm_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2206-2fx_firmware phoenixcontact:fl_switch_2206-2fx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2205_firmware phoenixcontact:fl_switch_2205_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2204-2tc-2sfx_firmware phoenixcontact:fl_switch_2204-2tc-2sfx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2116_firmware phoenixcontact:fl_switch_2116_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2108_firmware phoenixcontact:fl_switch_2108_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2105_firmware phoenixcontact:fl_switch_2105_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2016_firmware phoenixcontact:fl_switch_2016_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2008f_firmware phoenixcontact:fl_switch_2008f_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2008_firmware phoenixcontact:fl_switch_2008_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2005_firmware phoenixcontact:fl_switch_2005_firmware | before 3.50 | NVD |
phoenixcontact fl_nat_2304-2gc-2sfp_firmware phoenixcontact:fl_nat_2304-2gc-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_nat_2208_firmware phoenixcontact:fl_nat_2208_firmware | before 3.50 | NVD |
phoenixcontact fl_nat_2008_firmware phoenixcontact:fl_nat_2008_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2516_firmware phoenixcontact:fl_switch_2516_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2514-2sfp_pn_firmware phoenixcontact:fl_switch_2514-2sfp_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2514-2sfp_firmware phoenixcontact:fl_switch_2514-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2512-2gc-2sfp_firmware phoenixcontact:fl_switch_2512-2gc-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2508_pn_firmware phoenixcontact:fl_switch_2508_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2508/k1_firmware phoenixcontact:fl_switch_2508/k1_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2508_firmware phoenixcontact:fl_switch_2508_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2506-2sfp_pn_firmware phoenixcontact:fl_switch_2506-2sfp_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2506-2sfp/k1_firmware phoenixcontact:fl_switch_2506-2sfp/k1_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2506-2sfp_firmware phoenixcontact:fl_switch_2506-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2504-2gc-2sfp_firmware phoenixcontact:fl_switch_2504-2gc-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2416_pn_firmware phoenixcontact:fl_switch_2416_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2416_firmware phoenixcontact:fl_switch_2416_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2414-2sfx_pn_firmware phoenixcontact:fl_switch_2414-2sfx_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2414-2sfx_firmware phoenixcontact:fl_switch_2414-2sfx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2412-2tc-2sfx_firmware phoenixcontact:fl_switch_2412-2tc-2sfx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2408_pn_firmware phoenixcontact:fl_switch_2408_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2408_firmware phoenixcontact:fl_switch_2408_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2406-2sfx_pn_firmware phoenixcontact:fl_switch_2406-2sfx_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2406-2sfx_firmware phoenixcontact:fl_switch_2406-2sfx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2404-2tc-2sfx_firmware phoenixcontact:fl_switch_2404-2tc-2sfx_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2316_pn_firmware phoenixcontact:fl_switch_2316_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2316/k1_firmware phoenixcontact:fl_switch_2316/k1_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2316_firmware phoenixcontact:fl_switch_2316_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2314-2sfp_pn_firmware phoenixcontact:fl_switch_2314-2sfp_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2314-2sfp_firmware phoenixcontact:fl_switch_2314-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2312-2gc-2sfp_firmware phoenixcontact:fl_switch_2312-2gc-2sfp_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2308_pn_firmware phoenixcontact:fl_switch_2308_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2308_firmware phoenixcontact:fl_switch_2308_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2306-2sfp_pn_firmware phoenixcontact:fl_switch_2306-2sfp_pn_firmware | before 3.50 | NVD |
phoenixcontact fl_switch_2306-2sfp_firmware phoenixcontact:fl_switch_2306-2sfp_firmware | before 3.50 | NVD |
References
- https://certvde.com/de/advisories/VDE-2025-071third-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.