CVE-2025-41692: Phoenixcontact Fl Nat 2008 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

Affected products

  • Phoenixcontact Fl Nat 2008 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Nat 2208 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2005 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2008 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2008f Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2016 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2105 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2108 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2116 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2205 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Sm Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Sm St Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx St Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2sfx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2sfx Pn Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206c-2fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2207-Fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2207-Fx Sm Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208 Pn Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208c Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware: before 3.50 (fixed in 3.50)
  • and 44 more

Published 2025-12-09. Last modified 2026-10-07.