PHOENIX CONTACT FL SWITCH

Name: PHOENIX CONTACT FL SWITCH
Brand: PHOENIX CONTACT

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical2high2medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-11187US	—	5.23% (92nd)	Exploit	3.57	2026-01-27	< 3.57
CVE-2025-69421US	high7.5	0.94% (61st)	Exploit	3.57	2026-01-27	< 3.57
CVE-2025-69420US	—	0.92% (60th)	Exploit	3.57	2026-01-27	< 3.57
CVE-2025-69419US	—	0.61% (49th)	Exploit	3.57	2026-01-27	< 3.57
CVE-2025-41752US	—	9.77% (96th)	—	3.50	2025-12-09	< 3.50
CVE-2025-41751US	—	9.77% (96th)	—	3.50	2025-12-09	< 3.50
CVE-2025-41750US	—	9.77% (96th)	—	3.50	2025-12-09	< 3.50
CVE-2025-41748US	—	9.77% (96th)	—	3.50	2025-12-09	< 3.50
CVE-2025-41747US	—	9.77% (96th)	—	3.50	2025-12-09	< 3.50
CVE-2025-41746US	—	9.77% (96th)	—	3.50	2025-12-09	< 3.50
CVE-2026-22317US	—	1.04% (64th)	—	no fix	2026-03-18	3 versions
CVE-2021-21003US	medium5.3	0.95% (61st)	—	no fix	2021-06-25	13 versions
CVE-2025-15468US	—	0.82% (57th)	—	3.57	2026-01-27	< 3.57
CVE-2021-21005US	high7.5	0.68% (52nd)	—	no fix	2021-06-25	13 versions
CVE-2025-41695US	—	0.66% (51st)	—	3.50	2025-12-09	< 3.50
CVE-2025-41749US	—	0.65% (51st)	—	3.50	2025-12-09	< 3.50
CVE-2025-41745US	—	0.65% (51st)	—	3.50	2025-12-09	< 3.50
CVE-2026-22796US	—	0.59% (48th)	—	3.57	2026-01-27	< 3.57
CVE-2021-21004US	medium6.1	0.58% (48th)	—	no fix	2021-06-25	13 versions
CVE-2025-41693US	—	0.52% (44th)	—	3.50	2025-12-09	< 3.50
CVE-2025-41694US	—	0.48% (41st)	—	3.50	2025-12-09	< 3.50
CVE-2025-66199US	—	0.46% (40th)	—	3.57	2026-01-27	< 3.57
CVE-2026-22316US	—	0.39% (33rd)	—	no fix	2026-03-18	3 versions
CVE-2026-22321US	—	0.38% (32nd)	—	no fix	2026-03-18	3 versions
CVE-2026-22319US	—	0.35% (29th)	—	no fix	2026-03-18	3 versions
CVE-2026-22318US	—	0.35% (29th)	—	no fix	2026-03-18	3 versions
CVE-2026-22320US	—	0.33% (26th)	—	no fix	2026-03-18	3 versions
CVE-2025-41692US	—	0.30% (22nd)	—	3.50	2025-12-09	< 3.50
CVE-2026-22322US	—	0.26% (18th)	—	no fix	2026-03-18	3 versions
CVE-2025-41697US	—OT elevated	0.24% (14th)	—	3.50	2025-12-09	< 3.50
CVE-2025-15469US	—	0.21% (12th)	—	3.57	2026-01-27	< 3.57
CVE-2025-41696US	—OT elevated	0.21% (11th)	—	3.50	2025-12-09	< 3.50
CVE-2025-68160US	—	0.19% (8th)	—	3.57	2026-01-27	< 3.57
CVE-2026-22323US	—	0.18% (8th)	—	no fix	2026-03-18	3 versions
CVE-2026-22795US	—	0.18% (7th)	—	3.57	2026-01-27	< 3.57
CVE-2025-69418US	—	0.13% (3rd)	—	3.57	2026-01-27	< 3.57

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-121Stack-based Buffer Overflow5 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-754Improper Check for Unusual or Exceptional Conditions3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-1299Missing Protection Mechanism for Alternate Hardware Interface1 CVEs
CWE-325Missing Cryptographic Step1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)33 CVEs
EUEU Vulnerability Database (ENISA)3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan