CVE-2025-41696: Hardcoded User Password
Published Dec 9, 2025
·Updated
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
Affected Software
138 affected components
All of the following
Phoenixcontact Fl Switch 2708 Pn Firmware<3.50
Phoenixcontact Fl Switch 2708 Pn
All of the following
Phoenixcontact Fl Switch 2708 Firmware<3.50
Phoenixcontact Fl Switch 2708
All of the following
Phoenixcontact Fl Switch 2608 Pn Firmware<3.50
Phoenixcontact Fl Switch 2608 Pn
All of the following
Phoenixcontact Fl Switch 2608 Firmware<3.50
Phoenixcontact Fl Switch 2608
All of the following
Phoenixcontact Fl Switch 2516 Pn Firmware<3.50
Phoenixcontact Fl Switch 2516 Pn
All of the following
Phoenixcontact Fl Switch 2516 Firmware<3.50
Phoenixcontact Fl Switch 2516
All of the following
Phoenixcontact Fl Switch 2514-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2514-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp
All of the following
Phoenixcontact Fl Switch 2512-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2512-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2508 Pn Firmware<3.50
Phoenixcontact Fl Switch 2508 Pn
All of the following
Phoenixcontact Fl Switch 2508\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2508\/k1
All of the following
Phoenixcontact Fl Switch 2508 Firmware<3.50
Phoenixcontact Fl Switch 2508
All of the following
Phoenixcontact Fl Switch 2506-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2506-2sfp\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp\/k1
All of the following
Phoenixcontact Fl Switch 2506-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp
All of the following
Phoenixcontact Fl Switch 2504-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2504-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2416 Pn Firmware<3.50
Phoenixcontact Fl Switch 2416 Pn
All of the following
Phoenixcontact Fl Switch 2416 Firmware<3.50
Phoenixcontact Fl Switch 2416
All of the following
Phoenixcontact Fl Switch 2414-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2414-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx
All of the following
Phoenixcontact Fl Switch 2412-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2412-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2408 Pn Firmware<3.50
Phoenixcontact Fl Switch 2408 Pn
All of the following
Phoenixcontact Fl Switch 2408 Firmware<3.50
Phoenixcontact Fl Switch 2408
All of the following
Phoenixcontact Fl Switch 2406-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2406-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx
All of the following
Phoenixcontact Fl Switch 2404-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2404-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2316 Pn Firmware<3.50
Phoenixcontact Fl Switch 2316 Pn
All of the following
Phoenixcontact Fl Switch 2316\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2316\/k1
All of the following
Phoenixcontact Fl Switch 2316 Firmware<3.50
Phoenixcontact Fl Switch 2316
All of the following
Phoenixcontact Fl Switch 2314-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2314-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp
All of the following
Phoenixcontact Fl Switch 2312-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2312-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2308 Pn Firmware<3.50
Phoenixcontact Fl Switch 2308 Pn
All of the following
Phoenixcontact Fl Switch 2308 Firmware<3.50
Phoenixcontact Fl Switch 2308
All of the following
Phoenixcontact Fl Switch 2306-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2306-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp
All of the following
Phoenixcontact Fl Switch 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2303-8sp1<3.50
Phoenixcontact Fl Switch 2303-8sp1
All of the following
Phoenixcontact Fl Switch 2216 Pn Firmware<3.50
Phoenixcontact Fl Switch 2216 Pn
All of the following
Phoenixcontact Fl Switch 2216 Firmware<3.50
Phoenixcontact Fl Switch 2216
All of the following
Phoenixcontact Fl Switch 2214-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2214-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx
All of the following
Phoenixcontact Fl Switch 2214-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx Sm
All of the following
Phoenixcontact Fl Switch 2214-2fx Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx
All of the following
Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2212-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2208c Firmware<3.50
Phoenixcontact Fl Switch 2208c
All of the following
Phoenixcontact Fl Switch 2208 Pn Firmware<3.50
Phoenixcontact Fl Switch 2208 Pn
All of the following
Phoenixcontact Fl Switch 2208 Firmware<3.50
Phoenixcontact Fl Switch 2208
All of the following
Phoenixcontact Fl Switch 2207-fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2207-fx Sm
All of the following
Phoenixcontact Fl Switch 2207-fx Firmware<3.50
Phoenixcontact Fl Switch 2207-fx
All of the following
Phoenixcontact Fl Switch 2206c-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206c-2fx
All of the following
Phoenixcontact Fl Switch 2206-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2206-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx
All of the following
Phoenixcontact Fl Switch 2206-2fx St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm
All of the following
Phoenixcontact Fl Switch 2206-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx
All of the following
Phoenixcontact Fl Switch 2205 Firmware<3.50
Phoenixcontact Fl Switch 2205
All of the following
Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2204-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2116 Firmware<3.50
Phoenixcontact Fl Switch 2116
All of the following
Phoenixcontact Fl Switch 2108 Firmware<3.50
Phoenixcontact Fl Switch 2108
All of the following
Phoenixcontact Fl Switch 2105 Firmware<3.50
Phoenixcontact Fl Switch 2105
All of the following
Phoenixcontact Fl Switch 2016 Firmware<3.50
Phoenixcontact Fl Switch 2016
All of the following
Phoenixcontact Fl Switch 2008f Firmware<3.50
Phoenixcontact Fl Switch 2008f
All of the following
Phoenixcontact Fl Switch 2008 Firmware<3.50
Phoenixcontact Fl Switch 2008
All of the following
Phoenixcontact Fl Switch 2005 Firmware<3.50
Phoenixcontact Fl Switch 2005
All of the following
Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Nat 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Nat 2208 Firmware<3.50
Phoenixcontact Fl Nat 2208
All of the following
Phoenixcontact Fl Nat 2008 Firmware<3.50
Phoenixcontact Fl Nat 2008
Event History
Dec 9, 2025
CVE Published
via MITRE·08:13 AM
Data Sourced
via MITRE·08:13 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41696?
CVE-2025-41696 is considered a high severity vulnerability because it allows attackers to gain unauthorized read access to filesystem parts using hardcoded credentials.
2
How do I fix CVE-2025-41696?
To mitigate CVE-2025-41696, it's essential to update the affected Phoenix Contact firmware to a version that is 3.50 or higher.
3
What are the potential impacts of CVE-2025-41696?
Exploitation of CVE-2025-41696 can lead to unauthorized access to sensitive information stored in the device's filesystem.
4
Which Phoenix Contact devices are affected by CVE-2025-41696?
CVE-2025-41696 affects multiple Phoenix Contact Fl Switch devices running firmware versions lower than 3.50.
5
Is there a way to detect exploitation attempts for CVE-2025-41696?
Monitoring the UART port activity for unusual access patterns may indicate exploitation attempts of CVE-2025-41696.