FS
Product
FL Switch 2512-2gc-2sfp Firmware
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 5Low 0
Watch
Add FL Switch 2512-2gc-2sfp Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22509 | 8.8 | Feb 2 | In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration Affected: 3.00 |
| CVE-2025-41748 | 7.1 | Dec 9 | An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… Affected: before 3.50 |
| CVE-2025-41746 | 7.1 | Dec 9 | An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… Affected: before 3.50 |
| CVE-2025-41697 | 6.8 | Dec 9 | An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g Affected: before 3.50 |
| CVE-2025-41692 | 6.8 | Dec 9 | A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation… Affected: before 3.50 |
| CVE-2025-41694 | 6.5 | Dec 9 | A low privileged remote attacker can run the webshell with an empty command containing whitespace Affected: before 3.50 |
| CVE-2025-41696 | 4.6 | Dec 9 | An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the… Affected: before 3.50 |
| CVE-2025-41693 | 4.3 | Dec 9 | A low privileged remote attacker can use the ssh feature to execute commands directly after login Affected: before 3.50 |
Showing 8