CVE-2025-41697: Phoenixcontact Fl Nat 2008 Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

Affected products

  • Phoenixcontact Fl Nat 2008 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Nat 2208 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2005 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2008 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2008f Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2016 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2105 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2108 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2116 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2205 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Sm Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx Sm St Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2fx St Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2sfx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206-2sfx Pn Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2206c-2fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2207-Fx Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2207-Fx Sm Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208 Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208 Pn Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2208c Firmware: before 3.50 (fixed in 3.50)
  • Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware: before 3.50 (fixed in 3.50)
  • and 44 more

Published 2025-12-09. Last modified 2026-10-07.