Medium severity · published Dec 9, 2025
CVE-2025-41696
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the…
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
FL Switch 2116 Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2204-2tc-2sfx Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2205 Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206-2fx Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206-2fx SM Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206-2fx SM ST Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206-2fx ST Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206-2sfx Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206-2sfx PN Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2206c-2fx Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2207-fx Firmware · Phoenixcontact
before 3.50 · source: NVD
FS
FL Switch 2207-fx SM Firmware · Phoenixcontact
before 3.50 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-41696
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-41696
Third Party Advisory
https://certvde.com/de/advisories/VDE-2025-071
More from FL Switch 2116 Firmware
8.8
CVE-2022-22509
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration
7.1
CVE-2025-41752
An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to…
7.1
CVE-2025-41751
An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to…
7.1
CVE-2025-41750
An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to…
7.1
CVE-2025-41749
An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to…