CVE-2025-41696: Phoenixcontact Fl Nat 2008 Firmware

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

Affected products

  • Phoenixcontact Fl Nat 2008 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Nat 2208 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2005 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2008 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2008f Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2016 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2105 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2108 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2116 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2205 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Sm Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Sm St Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx St Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2sfx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2sfx Pn Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206c-2fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2207-Fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2207-Fx Sm Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208 Pn Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208c Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware: before 3.50 (fixed in 3.50)
  • and 44 more

Published 2025-12-09. Last modified 2026-10-07.