CVE-2025-41752

highPriorität · verfolgen · 3EPSS 0.098 · 96. PerzentilDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
9.77% (96th) EPSS
CVSS 7.1 · high
Is it mine?
278 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cert_bund · phoenix_contact_psirt

EPSS · bewertet 2026-10-22

An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenFirmware <3.50 installed on FL NAT 2008phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL NAT 2208phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL NAT 2304-2GC-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2005phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2008phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2008Fphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2016phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2105phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2108phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2116phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2204-2TC-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2205phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206-2FXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206-2FX SMphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206-2FX SM STphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206-2FX STphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206-2SFX PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2206C-2FXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2207-FXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2207-FX SMphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2208phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2208 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2208Cphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2212-2TC-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2214-2FXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2214-2FX SMphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2214-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2214-2SFX PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2216phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2216 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2303-8SP1phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2304-2GC-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2306-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2306-2SFP PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2308phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2308 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2312-2GC-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2314-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2314-2SFP PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2316phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2316 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2316/K1phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2404-2TC-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2406-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2406-2SFX PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2408phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2408 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2412-2TC-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2414-2SFXphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2414-2SFX PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2416phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2416 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2504-2GC-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2506-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2506-2SFP PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2506-2SFP/K1phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2508phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2508 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2508/K1phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2512-2GC-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2514-2SFPphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2514-2SFP PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2516phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2516 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2608phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2608 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2708phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

  • BehobenFirmware <3.50 installed on FL SWITCH 2708 PNphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–7.1

v3.17.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Lsecondary · ENISA EU
v3.17.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Lsecondary · info@cert.vde.comAusnutzbarkeit 2.8 · Auswirkung 3.7
v3.17.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Lsecondary · Phoenix Contact PSIRT DE
v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-79USCWE-79US
05

betroffene Produkte (278)

Betroffene Produkte und Versionsbereiche.

20 von 278 angezeigt
06

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • VDE-2025-071Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware2025-12-09csaf · phoenix_contact_psirtDE

    Multiple vulnerabilities have been identified in the FL SWITCH 2xxx firmware prior to version 3.50. Two of these (CVE-2025-41692 and CVE-2025-41696) enable an attacker to access the device's file system. Two other vulnerabilities (CVE-2025-41693 and CVE-2025-41694) are related to Denial of Service (DoS) attacks, which partly limit the device's functionality. Another vulnerability (CVE-2025-41697) allows an unauthenticated physical attacker to access a login shell via an undocumented UART port. Furthermore, there are multiple vulnerabilities relating to reflected cross-site scripting in the web-based management of the device. All vulnerabilities have been resolved in firmware version 3.50.

  • WID-SEC-W-2025-2760Phoenix Contact FL SWITCH: Mehrere SchwachstellenDeutsch2025-12-08csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Phoenix Contact FL SWITCH ausnutzen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcert_bundphoenix_contact_psirtNVDCVE.orgMITRE
veröffentlicht 2025-12-09geändert 2026-06-17
09

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan