CVE-2025-41697
MEDIUM EPSS 9.7%
Published Dec 9, 20256mo ago · Modified Jun 17, 20261w ago
6.8 CVSS 3.1
Published Dec 9, 2025 6mo ago
Last Modified Jun 17, 2026 1w ago
Description
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Physical
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
9.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-1299
Affected Products 138
| Vendor | Product | Version | Range |
|---|---|---|---|
| phoenixcontact | fl_switch_2708_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2708_pn | * | any |
| phoenixcontact | fl_switch_2708_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2708 | * | any |
| phoenixcontact | fl_switch_2608_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2608_pn | * | any |
| phoenixcontact | fl_switch_2608_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2608 | * | any |
| phoenixcontact | fl_switch_2516_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2516_pn | * | any |
| phoenixcontact | fl_switch_2516_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2516 | * | any |
| phoenixcontact | fl_switch_2514-2sfp_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2514-2sfp_pn | * | any |
| phoenixcontact | fl_switch_2514-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2514-2sfp | * | any |
| phoenixcontact | fl_switch_2512-2gc-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2512-2gc-2sfp | * | any |
| phoenixcontact | fl_switch_2508_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2508_pn | * | any |
| phoenixcontact | fl_switch_2508\/k1_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2508\/k1 | * | any |
| phoenixcontact | fl_switch_2508_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2508 | * | any |
| phoenixcontact | fl_switch_2506-2sfp_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2506-2sfp_pn | * | any |
| phoenixcontact | fl_switch_2506-2sfp\/k1_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2506-2sfp\/k1 | * | any |
| phoenixcontact | fl_switch_2506-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2506-2sfp | * | any |
| phoenixcontact | fl_switch_2504-2gc-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2504-2gc-2sfp | * | any |
| phoenixcontact | fl_switch_2416_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2416_pn | * | any |
| phoenixcontact | fl_switch_2416_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2416 | * | any |
| phoenixcontact | fl_switch_2414-2sfx_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2414-2sfx_pn | * | any |
| phoenixcontact | fl_switch_2414-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2414-2sfx | * | any |
| phoenixcontact | fl_switch_2412-2tc-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2412-2tc-2sfx | * | any |
| phoenixcontact | fl_switch_2408_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2408_pn | * | any |
| phoenixcontact | fl_switch_2408_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2408 | * | any |
| phoenixcontact | fl_switch_2406-2sfx_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2406-2sfx_pn | * | any |
| phoenixcontact | fl_switch_2406-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2406-2sfx | * | any |
| phoenixcontact | fl_switch_2404-2tc-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2404-2tc-2sfx | * | any |
| phoenixcontact | fl_switch_2316_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2316_pn | * | any |
| phoenixcontact | fl_switch_2316\/k1_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2316\/k1 | * | any |
| phoenixcontact | fl_switch_2316_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2316 | * | any |
| phoenixcontact | fl_switch_2314-2sfp_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2314-2sfp_pn | * | any |
| phoenixcontact | fl_switch_2314-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2314-2sfp | * | any |
| phoenixcontact | fl_switch_2312-2gc-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2312-2gc-2sfp | * | any |
| phoenixcontact | fl_switch_2308_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2308_pn | * | any |
| phoenixcontact | fl_switch_2308_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2308 | * | any |
| phoenixcontact | fl_switch_2306-2sfp_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2306-2sfp_pn | * | any |
| phoenixcontact | fl_switch_2306-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2306-2sfp | * | any |
| phoenixcontact | fl_switch_2304-2gc-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2304-2gc-2sfp | * | any |
| phoenixcontact | fl_switch_2303-8sp1 | * | <3.50 |
| phoenixcontact | fl_switch_2303-8sp1 | * | any |
| phoenixcontact | fl_switch_2216_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2216_pn | * | any |
| phoenixcontact | fl_switch_2216_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2216 | * | any |
| phoenixcontact | fl_switch_2214-2sfx_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2214-2sfx_pn | * | any |
| phoenixcontact | fl_switch_2214-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2214-2sfx | * | any |
| phoenixcontact | fl_switch_2214-2fx_sm_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2214-2fx_sm | * | any |
| phoenixcontact | fl_switch_2214-2fx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2214-2fx | * | any |
| phoenixcontact | fl_switch_2212-2tc-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2212-2tc-2sfx | * | any |
| phoenixcontact | fl_switch_2208c_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2208c | * | any |
| phoenixcontact | fl_switch_2208_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2208_pn | * | any |
| phoenixcontact | fl_switch_2208_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2208 | * | any |
| phoenixcontact | fl_switch_2207-fx_sm_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2207-fx_sm | * | any |
| phoenixcontact | fl_switch_2207-fx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2207-fx | * | any |
| phoenixcontact | fl_switch_2206c-2fx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206c-2fx | * | any |
| phoenixcontact | fl_switch_2206-2sfx_pn_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206-2sfx_pn | * | any |
| phoenixcontact | fl_switch_2206-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206-2sfx | * | any |
| phoenixcontact | fl_switch_2206-2fx_st_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206-2fx_st | * | any |
| phoenixcontact | fl_switch_2206-2fx_sm_st_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206-2fx_sm_st | * | any |
| phoenixcontact | fl_switch_2206-2fx_sm_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206-2fx_sm | * | any |
| phoenixcontact | fl_switch_2206-2fx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2206-2fx | * | any |
| phoenixcontact | fl_switch_2205_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2205 | * | any |
| phoenixcontact | fl_switch_2204-2tc-2sfx_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2204-2tc-2sfx | * | any |
| phoenixcontact | fl_switch_2116_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2116 | * | any |
| phoenixcontact | fl_switch_2108_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2108 | * | any |
| phoenixcontact | fl_switch_2105_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2105 | * | any |
| phoenixcontact | fl_switch_2016_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2016 | * | any |
| phoenixcontact | fl_switch_2008f_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2008f | * | any |
| phoenixcontact | fl_switch_2008_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2008 | * | any |
| phoenixcontact | fl_switch_2005_firmware | * | <3.50 |
| phoenixcontact | fl_switch_2005 | * | any |
| phoenixcontact | fl_nat_2304-2gc-2sfp_firmware | * | <3.50 |
| phoenixcontact | fl_nat_2304-2gc-2sfp | * | any |
| phoenixcontact | fl_nat_2208_firmware | * | <3.50 |
| phoenixcontact | fl_nat_2208 | * | any |
| phoenixcontact | fl_nat_2008_firmware | * | <3.50 |
| phoenixcontact | fl_nat_2008 | * | any |
References 1
- certvde.com https://certvde.com/de/advisories/VDE-2025-071
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.