CVE-2025-41692: Weak/Predictable root Password
Published Dec 9, 2025
·Updated
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.
Affected Software
138 affected components
All of the following
Phoenixcontact Fl Switch 2708 Pn Firmware<3.50
Phoenixcontact Fl Switch 2708 Pn
All of the following
Phoenixcontact Fl Switch 2708 Firmware<3.50
Phoenixcontact Fl Switch 2708
All of the following
Phoenixcontact Fl Switch 2608 Pn Firmware<3.50
Phoenixcontact Fl Switch 2608 Pn
All of the following
Phoenixcontact Fl Switch 2608 Firmware<3.50
Phoenixcontact Fl Switch 2608
All of the following
Phoenixcontact Fl Switch 2516 Pn Firmware<3.50
Phoenixcontact Fl Switch 2516 Pn
All of the following
Phoenixcontact Fl Switch 2208c Firmware<3.50
Phoenixcontact Fl Switch 2208c
All of the following
Phoenixcontact Fl Switch 2208 Pn Firmware<3.50
Phoenixcontact Fl Switch 2208 Pn
All of the following
Phoenixcontact Fl Switch 2208 Firmware<3.50
Phoenixcontact Fl Switch 2208
All of the following
Phoenixcontact Fl Switch 2207-fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2207-fx Sm
All of the following
Phoenixcontact Fl Switch 2207-fx Firmware<3.50
Phoenixcontact Fl Switch 2207-fx
All of the following
Phoenixcontact Fl Switch 2206c-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206c-2fx
All of the following
Phoenixcontact Fl Switch 2206-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2206-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx
All of the following
Phoenixcontact Fl Switch 2206-2fx St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm
All of the following
Phoenixcontact Fl Switch 2206-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx
All of the following
Phoenixcontact Fl Switch 2205 Firmware<3.50
Phoenixcontact Fl Switch 2205
All of the following
Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2204-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2116 Firmware<3.50
Phoenixcontact Fl Switch 2116
All of the following
Phoenixcontact Fl Switch 2108 Firmware<3.50
Phoenixcontact Fl Switch 2108
All of the following
Phoenixcontact Fl Switch 2105 Firmware<3.50
Phoenixcontact Fl Switch 2105
All of the following
Phoenixcontact Fl Switch 2016 Firmware<3.50
Phoenixcontact Fl Switch 2016
All of the following
Phoenixcontact Fl Switch 2008f Firmware<3.50
Phoenixcontact Fl Switch 2008f
All of the following
Phoenixcontact Fl Switch 2008 Firmware<3.50
Phoenixcontact Fl Switch 2008
All of the following
Phoenixcontact Fl Switch 2005 Firmware<3.50
Phoenixcontact Fl Switch 2005
All of the following
Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Nat 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Nat 2208 Firmware<3.50
Phoenixcontact Fl Nat 2208
All of the following
Phoenixcontact Fl Nat 2008 Firmware<3.50
Phoenixcontact Fl Nat 2008
All of the following
Phoenixcontact Fl Switch 2516 Firmware<3.50
Phoenixcontact Fl Switch 2516
All of the following
Phoenixcontact Fl Switch 2514-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2514-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp
All of the following
Phoenixcontact Fl Switch 2512-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2512-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2508 Pn Firmware<3.50
Phoenixcontact Fl Switch 2508 Pn
All of the following
Phoenixcontact Fl Switch 2508\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2508\/k1
All of the following
Phoenixcontact Fl Switch 2508 Firmware<3.50
Phoenixcontact Fl Switch 2508
All of the following
Phoenixcontact Fl Switch 2506-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2506-2sfp\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp\/k1
All of the following
Phoenixcontact Fl Switch 2506-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp
All of the following
Phoenixcontact Fl Switch 2504-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2504-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2416 Pn Firmware<3.50
Phoenixcontact Fl Switch 2416 Pn
All of the following
Phoenixcontact Fl Switch 2416 Firmware<3.50
Phoenixcontact Fl Switch 2416
All of the following
Phoenixcontact Fl Switch 2414-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2414-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx
All of the following
Phoenixcontact Fl Switch 2412-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2412-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2408 Pn Firmware<3.50
Phoenixcontact Fl Switch 2408 Pn
All of the following
Phoenixcontact Fl Switch 2408 Firmware<3.50
Phoenixcontact Fl Switch 2408
All of the following
Phoenixcontact Fl Switch 2406-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2406-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx
All of the following
Phoenixcontact Fl Switch 2404-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2404-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2316 Pn Firmware<3.50
Phoenixcontact Fl Switch 2316 Pn
All of the following
Phoenixcontact Fl Switch 2316\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2316\/k1
All of the following
Phoenixcontact Fl Switch 2316 Firmware<3.50
Phoenixcontact Fl Switch 2316
All of the following
Phoenixcontact Fl Switch 2314-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2314-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp
All of the following
Phoenixcontact Fl Switch 2312-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2312-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2308 Pn Firmware<3.50
Phoenixcontact Fl Switch 2308 Pn
All of the following
Phoenixcontact Fl Switch 2308 Firmware<3.50
Phoenixcontact Fl Switch 2308
All of the following
Phoenixcontact Fl Switch 2306-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2306-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp
All of the following
Phoenixcontact Fl Switch 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2303-8sp1<3.50
Phoenixcontact Fl Switch 2303-8sp1
All of the following
Phoenixcontact Fl Switch 2216 Pn Firmware<3.50
Phoenixcontact Fl Switch 2216 Pn
All of the following
Phoenixcontact Fl Switch 2216 Firmware<3.50
Phoenixcontact Fl Switch 2216
All of the following
Phoenixcontact Fl Switch 2214-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2214-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx
All of the following
Phoenixcontact Fl Switch 2214-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx Sm
All of the following
Phoenixcontact Fl Switch 2214-2fx Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx
All of the following
Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2212-2tc-2sfx
Event History
Dec 9, 2025
CVE Published
via MITRE·08:12 AM
Data Sourced
via MITRE·08:12 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41692?
CVE-2025-41692 has a high severity due to the potential for a remote attacker with admin privileges to brute-force critical passwords.
2
How do I fix CVE-2025-41692?
To fix CVE-2025-41692, update the affected Phoenixcontact Fl Switch firmware to version 3.50 or later which addresses the weak password generation issue.
3
Which versions are affected by CVE-2025-41692?
CVE-2025-41692 affects multiple Phoenixcontact Fl Switch models with firmware versions prior to 3.50.
4
What are the risks associated with CVE-2025-41692?
The risks associated with CVE-2025-41692 include unauthorized access to critical system controls and potential data breaches.
5
Who can exploit CVE-2025-41692?
CVE-2025-41692 can be exploited by remote attackers with admin privileges to brute-force passwords of the underlying OS.