CVE-2025-41694: Authenticated Denial-of-Service via Webshell
Published Dec 9, 2025
·Updated
A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.
Affected Software
138 affected components
All of the following
Phoenixcontact Fl Switch 2708 Pn Firmware<3.50
Phoenixcontact Fl Switch 2708 Pn
All of the following
Phoenixcontact Fl Switch 2708 Firmware<3.50
Phoenixcontact Fl Switch 2708
All of the following
Phoenixcontact Fl Switch 2608 Pn Firmware<3.50
Phoenixcontact Fl Switch 2608 Pn
All of the following
Phoenixcontact Fl Switch 2608 Firmware<3.50
Phoenixcontact Fl Switch 2608
All of the following
Phoenixcontact Fl Switch 2516 Pn Firmware<3.50
Phoenixcontact Fl Switch 2516 Pn
All of the following
Phoenixcontact Fl Switch 2208c Firmware<3.50
Phoenixcontact Fl Switch 2208c
All of the following
Phoenixcontact Fl Switch 2208 Pn Firmware<3.50
Phoenixcontact Fl Switch 2208 Pn
All of the following
Phoenixcontact Fl Switch 2208 Firmware<3.50
Phoenixcontact Fl Switch 2208
All of the following
Phoenixcontact Fl Switch 2207-fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2207-fx Sm
All of the following
Phoenixcontact Fl Switch 2207-fx Firmware<3.50
Phoenixcontact Fl Switch 2207-fx
All of the following
Phoenixcontact Fl Switch 2206c-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206c-2fx
All of the following
Phoenixcontact Fl Switch 2206-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2206-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx
All of the following
Phoenixcontact Fl Switch 2206-2fx St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm
All of the following
Phoenixcontact Fl Switch 2206-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx
All of the following
Phoenixcontact Fl Switch 2205 Firmware<3.50
Phoenixcontact Fl Switch 2205
All of the following
Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2204-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2116 Firmware<3.50
Phoenixcontact Fl Switch 2116
All of the following
Phoenixcontact Fl Switch 2108 Firmware<3.50
Phoenixcontact Fl Switch 2108
All of the following
Phoenixcontact Fl Switch 2105 Firmware<3.50
Phoenixcontact Fl Switch 2105
All of the following
Phoenixcontact Fl Switch 2016 Firmware<3.50
Phoenixcontact Fl Switch 2016
All of the following
Phoenixcontact Fl Switch 2008f Firmware<3.50
Phoenixcontact Fl Switch 2008f
All of the following
Phoenixcontact Fl Switch 2008 Firmware<3.50
Phoenixcontact Fl Switch 2008
All of the following
Phoenixcontact Fl Switch 2005 Firmware<3.50
Phoenixcontact Fl Switch 2005
All of the following
Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Nat 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Nat 2208 Firmware<3.50
Phoenixcontact Fl Nat 2208
All of the following
Phoenixcontact Fl Nat 2008 Firmware<3.50
Phoenixcontact Fl Nat 2008
All of the following
Phoenixcontact Fl Switch 2516 Firmware<3.50
Phoenixcontact Fl Switch 2516
All of the following
Phoenixcontact Fl Switch 2514-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2514-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp
All of the following
Phoenixcontact Fl Switch 2512-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2512-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2508 Pn Firmware<3.50
Phoenixcontact Fl Switch 2508 Pn
All of the following
Phoenixcontact Fl Switch 2508\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2508\/k1
All of the following
Phoenixcontact Fl Switch 2508 Firmware<3.50
Phoenixcontact Fl Switch 2508
All of the following
Phoenixcontact Fl Switch 2506-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2506-2sfp\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp\/k1
All of the following
Phoenixcontact Fl Switch 2506-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp
All of the following
Phoenixcontact Fl Switch 2504-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2504-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2416 Pn Firmware<3.50
Phoenixcontact Fl Switch 2416 Pn
All of the following
Phoenixcontact Fl Switch 2416 Firmware<3.50
Phoenixcontact Fl Switch 2416
All of the following
Phoenixcontact Fl Switch 2414-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2414-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx
All of the following
Phoenixcontact Fl Switch 2412-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2412-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2408 Pn Firmware<3.50
Phoenixcontact Fl Switch 2408 Pn
All of the following
Phoenixcontact Fl Switch 2408 Firmware<3.50
Phoenixcontact Fl Switch 2408
All of the following
Phoenixcontact Fl Switch 2406-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2406-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx
All of the following
Phoenixcontact Fl Switch 2404-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2404-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2316 Pn Firmware<3.50
Phoenixcontact Fl Switch 2316 Pn
All of the following
Phoenixcontact Fl Switch 2316\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2316\/k1
All of the following
Phoenixcontact Fl Switch 2316 Firmware<3.50
Phoenixcontact Fl Switch 2316
All of the following
Phoenixcontact Fl Switch 2314-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2314-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp
All of the following
Phoenixcontact Fl Switch 2312-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2312-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2308 Pn Firmware<3.50
Phoenixcontact Fl Switch 2308 Pn
All of the following
Phoenixcontact Fl Switch 2308 Firmware<3.50
Phoenixcontact Fl Switch 2308
All of the following
Phoenixcontact Fl Switch 2306-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2306-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp
All of the following
Phoenixcontact Fl Switch 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2303-8sp1<3.50
Phoenixcontact Fl Switch 2303-8sp1
All of the following
Phoenixcontact Fl Switch 2216 Pn Firmware<3.50
Phoenixcontact Fl Switch 2216 Pn
All of the following
Phoenixcontact Fl Switch 2216 Firmware<3.50
Phoenixcontact Fl Switch 2216
All of the following
Phoenixcontact Fl Switch 2214-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2214-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx
All of the following
Phoenixcontact Fl Switch 2214-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx Sm
All of the following
Phoenixcontact Fl Switch 2214-2fx Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx
All of the following
Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2212-2tc-2sfx
Event History
Dec 9, 2025
CVE Published
via MITRE·08:12 AM
Data Sourced
via MITRE·08:12 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41694?
CVE-2025-41694 has a low severity rating, allowing low privileged remote attackers to exploit the vulnerability.
2
How do I fix CVE-2025-41694?
To resolve CVE-2025-41694, update the affected Phoenixcontact Fl Switch firmware to version 3.50 or higher.
3
What is the impact of CVE-2025-41694?
The impact of CVE-2025-41694 is a Denial of Service (DoS) condition on the web server after exploitation.
4
Which devices are affected by CVE-2025-41694?
CVE-2025-41694 affects several Phoenixcontact Fl Switch devices running firmware prior to version 3.50.
5
Can CVE-2025-41694 be exploited without authentication?
Yes, CVE-2025-41694 can be exploited by low privileged remote attackers without requiring authentication.