Back to the CVE list
CVE-2025-41697

Vulnerability in Phoenixcontact Fl Switch 2708 Pn Firmware

CVSS score

6.8

EPSS probability

%0.2

Risk score

0.0

Published

10 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-41697 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-41697 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1phoenixcontactfl switch 2708 pn firmware View
2phoenixcontactfl switch 2708 pn View
3phoenixcontactfl switch 2708 firmware View
4phoenixcontactfl switch 2708 View
5phoenixcontactfl switch 2608 pn firmware View
6phoenixcontactfl switch 2608 pn View
7phoenixcontactfl switch 2608 firmware View
8phoenixcontactfl switch 2608 View
9phoenixcontactfl switch 2516 pn firmware View
10phoenixcontactfl switch 2516 pn View
11phoenixcontactfl switch 2516 firmware View
12phoenixcontactfl switch 2516 View
13phoenixcontactfl switch 2514-2sfp pn firmware View
14phoenixcontactfl switch 2514-2sfp pn View
15phoenixcontactfl switch 2514-2sfp firmware View
16phoenixcontactfl switch 2514-2sfp View
17phoenixcontactfl switch 2512-2gc-2sfp firmware View
18phoenixcontactfl switch 2512-2gc-2sfp View
19phoenixcontactfl switch 2508 pn firmware View
20phoenixcontactfl switch 2508 pn View
21phoenixcontactfl switch 2508/k1 firmware View
22phoenixcontactfl switch 2508/k1 View
23phoenixcontactfl switch 2508 firmware View
24phoenixcontactfl switch 2508 View
25phoenixcontactfl switch 2506-2sfp pn firmware View
26phoenixcontactfl switch 2506-2sfp pn View
27phoenixcontactfl switch 2506-2sfp/k1 firmware View
28phoenixcontactfl switch 2506-2sfp/k1 View
29phoenixcontactfl switch 2506-2sfp firmware View
30phoenixcontactfl switch 2506-2sfp View
31phoenixcontactfl switch 2504-2gc-2sfp firmware View
32phoenixcontactfl switch 2504-2gc-2sfp View
33phoenixcontactfl switch 2416 pn firmware View
34phoenixcontactfl switch 2416 pn View
35phoenixcontactfl switch 2416 firmware View
36phoenixcontactfl switch 2416 View
37phoenixcontactfl switch 2414-2sfx pn firmware View
38phoenixcontactfl switch 2414-2sfx pn View
39phoenixcontactfl switch 2414-2sfx firmware View
40phoenixcontactfl switch 2414-2sfx View
41phoenixcontactfl switch 2412-2tc-2sfx firmware View
42phoenixcontactfl switch 2412-2tc-2sfx View
43phoenixcontactfl switch 2408 pn firmware View
44phoenixcontactfl switch 2408 pn View
45phoenixcontactfl switch 2408 firmware View
46phoenixcontactfl switch 2408 View
47phoenixcontactfl switch 2406-2sfx pn firmware View
48phoenixcontactfl switch 2406-2sfx pn View
49phoenixcontactfl switch 2406-2sfx firmware View
50phoenixcontactfl switch 2406-2sfx View
51phoenixcontactfl switch 2404-2tc-2sfx firmware View
52phoenixcontactfl switch 2404-2tc-2sfx View
53phoenixcontactfl switch 2316 pn firmware View
54phoenixcontactfl switch 2316 pn View
55phoenixcontactfl switch 2316/k1 firmware View
56phoenixcontactfl switch 2316/k1 View
57phoenixcontactfl switch 2316 firmware View
58phoenixcontactfl switch 2316 View
59phoenixcontactfl switch 2314-2sfp pn firmware View
60phoenixcontactfl switch 2314-2sfp pn View
61phoenixcontactfl switch 2314-2sfp firmware View
62phoenixcontactfl switch 2314-2sfp View
63phoenixcontactfl switch 2312-2gc-2sfp firmware View
64phoenixcontactfl switch 2312-2gc-2sfp View
65phoenixcontactfl switch 2308 pn firmware View
66phoenixcontactfl switch 2308 pn View
67phoenixcontactfl switch 2308 firmware View
68phoenixcontactfl switch 2308 View
69phoenixcontactfl switch 2306-2sfp pn firmware View
70phoenixcontactfl switch 2306-2sfp pn View
71phoenixcontactfl switch 2306-2sfp firmware View
72phoenixcontactfl switch 2306-2sfp View
73phoenixcontactfl switch 2304-2gc-2sfp firmware View
74phoenixcontactfl switch 2304-2gc-2sfp View
75phoenixcontactfl switch 2303-8sp1 View
76phoenixcontactfl switch 2303-8sp1 View
77phoenixcontactfl switch 2216 pn firmware View
78phoenixcontactfl switch 2216 pn View
79phoenixcontactfl switch 2216 firmware View
80phoenixcontactfl switch 2216 View
81phoenixcontactfl switch 2214-2sfx pn firmware View
82phoenixcontactfl switch 2214-2sfx pn View
83phoenixcontactfl switch 2214-2sfx firmware View
84phoenixcontactfl switch 2214-2sfx View
85phoenixcontactfl switch 2214-2fx sm firmware View
86phoenixcontactfl switch 2214-2fx sm View
87phoenixcontactfl switch 2214-2fx firmware View
88phoenixcontactfl switch 2214-2fx View
89phoenixcontactfl switch 2212-2tc-2sfx firmware View
90phoenixcontactfl switch 2212-2tc-2sfx View
91phoenixcontactfl switch 2208c firmware View
92phoenixcontactfl switch 2208c View
93phoenixcontactfl switch 2208 pn firmware View
94phoenixcontactfl switch 2208 pn View
95phoenixcontactfl switch 2208 firmware View
96phoenixcontactfl switch 2208 View
97phoenixcontactfl switch 2207-fx sm firmware View
98phoenixcontactfl switch 2207-fx sm View
99phoenixcontactfl switch 2207-fx firmware View
100phoenixcontactfl switch 2207-fx View
101phoenixcontactfl switch 2206c-2fx firmware View
102phoenixcontactfl switch 2206c-2fx View
103phoenixcontactfl switch 2206-2sfx pn firmware View
104phoenixcontactfl switch 2206-2sfx pn View
105phoenixcontactfl switch 2206-2sfx firmware View
106phoenixcontactfl switch 2206-2sfx View
107phoenixcontactfl switch 2206-2fx st firmware View
108phoenixcontactfl switch 2206-2fx st View
109phoenixcontactfl switch 2206-2fx sm st firmware View
110phoenixcontactfl switch 2206-2fx sm st View
111phoenixcontactfl switch 2206-2fx sm firmware View
112phoenixcontactfl switch 2206-2fx sm View
113phoenixcontactfl switch 2206-2fx firmware View
114phoenixcontactfl switch 2206-2fx View
115phoenixcontactfl switch 2205 firmware View
116phoenixcontactfl switch 2205 View
117phoenixcontactfl switch 2204-2tc-2sfx firmware View
118phoenixcontactfl switch 2204-2tc-2sfx View
119phoenixcontactfl switch 2116 firmware View
120phoenixcontactfl switch 2116 View
121phoenixcontactfl switch 2108 firmware View
122phoenixcontactfl switch 2108 View
123phoenixcontactfl switch 2105 firmware View
124phoenixcontactfl switch 2105 View
125phoenixcontactfl switch 2016 firmware View
126phoenixcontactfl switch 2016 View
127phoenixcontactfl switch 2008f firmware View
128phoenixcontactfl switch 2008f View
129phoenixcontactfl switch 2008 firmware View
130phoenixcontactfl switch 2008 View
131phoenixcontactfl switch 2005 firmware View
132phoenixcontactfl switch 2005 View
133phoenixcontactfl nat 2304-2gc-2sfp firmware View
134phoenixcontactfl nat 2304-2gc-2sfp View
135phoenixcontactfl nat 2208 firmware View
136phoenixcontactfl nat 2208 View
137phoenixcontactfl nat 2008 firmware View
138phoenixcontactfl nat 2008 View
Total affected vendors: 1|Products: 138

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.8CVSS V31MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-41697 is associated with the following CWEs:

CWE-1299: Common Weakness Enumeration Entry CWE-1299

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-41697 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureFiziksel
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://certvde.com/de/advisories/VDE-2025-071nvd

CVSS Vector Radar Chart

6.8 / 10
Attack VectorLocalComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorPhysical
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

P
phoenixcontact logo
phoenixcontact

Weakness Type (CWE & CAPEC)

CWE-1299

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-41697"
CVE-2025-41697 · Vulnerability in Phoenixcontact Fl Switch 2708 Pn Firmware · DayBreach