FS
Product
FL Switch 2108 Firmware
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 2Low 0
Watch
Add FL Switch 2108 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22509 | 8.8 | Feb 2 | In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration Affected: 3.00 |
| CVE-2025-41752 | 7.1 | Dec 9 | An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… Affected: before 3.50 |
| CVE-2025-41751 | 7.1 | Dec 9 | An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… Affected: before 3.50 |
| CVE-2025-41750 | 7.1 | Dec 9 | An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… Affected: before 3.50 |
| CVE-2025-41749 | 7.1 | Dec 9 | An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… Affected: before 3.50 |
| CVE-2025-41748 | 7.1 | Dec 9 | An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… Affected: before 3.50 |
| CVE-2025-41747 | 7.1 | Dec 9 | An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… Affected: before 3.50 |
| CVE-2025-41746 | 7.1 | Dec 9 | An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… Affected: before 3.50 |
| CVE-2025-41745 | 7.1 | Dec 9 | An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… Affected: before 3.50 |
| CVE-2025-41695 | 7.1 | Dec 9 | An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to… Affected: before 3.50 |
| CVE-2025-41692 | 6.8 | Dec 9 | A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation… Affected: before 3.50 |
| CVE-2025-41694 | 6.5 | Dec 9 | A low privileged remote attacker can run the webshell with an empty command containing whitespace Affected: before 3.50 |
Showing 12