CVE-2025-41697: Shell access to UART Console
Published Dec 9, 2025
ยทUpdated
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
Affected Software
138 affected components
All of the following
Phoenixcontact Fl Switch 2708 Pn Firmware<3.50
Phoenixcontact Fl Switch 2708 Pn
All of the following
Phoenixcontact Fl Switch 2708 Firmware<3.50
Phoenixcontact Fl Switch 2708
All of the following
Phoenixcontact Fl Switch 2608 Pn Firmware<3.50
Phoenixcontact Fl Switch 2608 Pn
All of the following
Phoenixcontact Fl Switch 2608 Firmware<3.50
Phoenixcontact Fl Switch 2608
All of the following
Phoenixcontact Fl Switch 2516 Pn Firmware<3.50
Phoenixcontact Fl Switch 2516 Pn
All of the following
Phoenixcontact Fl Switch 2516 Firmware<3.50
Phoenixcontact Fl Switch 2516
All of the following
Phoenixcontact Fl Switch 2514-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2514-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2514-2sfp
All of the following
Phoenixcontact Fl Switch 2512-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2512-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2508 Pn Firmware<3.50
Phoenixcontact Fl Switch 2508 Pn
All of the following
Phoenixcontact Fl Switch 2508\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2508\/k1
All of the following
Phoenixcontact Fl Switch 2508 Firmware<3.50
Phoenixcontact Fl Switch 2508
All of the following
Phoenixcontact Fl Switch 2506-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2506-2sfp\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp\/k1
All of the following
Phoenixcontact Fl Switch 2506-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2506-2sfp
All of the following
Phoenixcontact Fl Switch 2504-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2504-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2416 Pn Firmware<3.50
Phoenixcontact Fl Switch 2416 Pn
All of the following
Phoenixcontact Fl Switch 2416 Firmware<3.50
Phoenixcontact Fl Switch 2416
All of the following
Phoenixcontact Fl Switch 2414-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2414-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2414-2sfx
All of the following
Phoenixcontact Fl Switch 2412-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2412-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2408 Pn Firmware<3.50
Phoenixcontact Fl Switch 2408 Pn
All of the following
Phoenixcontact Fl Switch 2408 Firmware<3.50
Phoenixcontact Fl Switch 2408
All of the following
Phoenixcontact Fl Switch 2406-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2406-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2406-2sfx
All of the following
Phoenixcontact Fl Switch 2404-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2404-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2316 Pn Firmware<3.50
Phoenixcontact Fl Switch 2316 Pn
All of the following
Phoenixcontact Fl Switch 2316\/k1 Firmware<3.50
Phoenixcontact Fl Switch 2316\/k1
All of the following
Phoenixcontact Fl Switch 2316 Firmware<3.50
Phoenixcontact Fl Switch 2316
All of the following
Phoenixcontact Fl Switch 2314-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2314-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2314-2sfp
All of the following
Phoenixcontact Fl Switch 2312-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2312-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2308 Pn Firmware<3.50
Phoenixcontact Fl Switch 2308 Pn
All of the following
Phoenixcontact Fl Switch 2308 Firmware<3.50
Phoenixcontact Fl Switch 2308
All of the following
Phoenixcontact Fl Switch 2306-2sfp Pn Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp Pn
All of the following
Phoenixcontact Fl Switch 2306-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2306-2sfp
All of the following
Phoenixcontact Fl Switch 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Switch 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Switch 2303-8sp1<3.50
Phoenixcontact Fl Switch 2303-8sp1
All of the following
Phoenixcontact Fl Switch 2216 Pn Firmware<3.50
Phoenixcontact Fl Switch 2216 Pn
All of the following
Phoenixcontact Fl Switch 2216 Firmware<3.50
Phoenixcontact Fl Switch 2216
All of the following
Phoenixcontact Fl Switch 2214-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2214-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2214-2sfx
All of the following
Phoenixcontact Fl Switch 2214-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx Sm
All of the following
Phoenixcontact Fl Switch 2214-2fx Firmware<3.50
Phoenixcontact Fl Switch 2214-2fx
All of the following
Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2212-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2208c Firmware<3.50
Phoenixcontact Fl Switch 2208c
All of the following
Phoenixcontact Fl Switch 2208 Pn Firmware<3.50
Phoenixcontact Fl Switch 2208 Pn
All of the following
Phoenixcontact Fl Switch 2208 Firmware<3.50
Phoenixcontact Fl Switch 2208
All of the following
Phoenixcontact Fl Switch 2207-fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2207-fx Sm
All of the following
Phoenixcontact Fl Switch 2207-fx Firmware<3.50
Phoenixcontact Fl Switch 2207-fx
All of the following
Phoenixcontact Fl Switch 2206c-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206c-2fx
All of the following
Phoenixcontact Fl Switch 2206-2sfx Pn Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx Pn
All of the following
Phoenixcontact Fl Switch 2206-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2206-2sfx
All of the following
Phoenixcontact Fl Switch 2206-2fx St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm St Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm St
All of the following
Phoenixcontact Fl Switch 2206-2fx Sm Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx Sm
All of the following
Phoenixcontact Fl Switch 2206-2fx Firmware<3.50
Phoenixcontact Fl Switch 2206-2fx
All of the following
Phoenixcontact Fl Switch 2205 Firmware<3.50
Phoenixcontact Fl Switch 2205
All of the following
Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware<3.50
Phoenixcontact Fl Switch 2204-2tc-2sfx
All of the following
Phoenixcontact Fl Switch 2116 Firmware<3.50
Phoenixcontact Fl Switch 2116
All of the following
Phoenixcontact Fl Switch 2108 Firmware<3.50
Phoenixcontact Fl Switch 2108
All of the following
Phoenixcontact Fl Switch 2105 Firmware<3.50
Phoenixcontact Fl Switch 2105
All of the following
Phoenixcontact Fl Switch 2016 Firmware<3.50
Phoenixcontact Fl Switch 2016
All of the following
Phoenixcontact Fl Switch 2008f Firmware<3.50
Phoenixcontact Fl Switch 2008f
All of the following
Phoenixcontact Fl Switch 2008 Firmware<3.50
Phoenixcontact Fl Switch 2008
All of the following
Phoenixcontact Fl Switch 2005 Firmware<3.50
Phoenixcontact Fl Switch 2005
All of the following
Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware<3.50
Phoenixcontact Fl Nat 2304-2gc-2sfp
All of the following
Phoenixcontact Fl Nat 2208 Firmware<3.50
Phoenixcontact Fl Nat 2208
All of the following
Phoenixcontact Fl Nat 2008 Firmware<3.50
Phoenixcontact Fl Nat 2008
Event History
Dec 9, 2025
CVE Published
via MITREยท08:12 AM
Data Sourced
via MITREยท08:12 AM
DescriptionSeverityWeakness
Data Sourced
via NVDยท04:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41697?
CVE-2025-41697 has a critical severity rating as it allows an attacker to gain root access via an undocumented UART port.
2
How do I fix CVE-2025-41697?
To fix CVE-2025-41697, update the firmware of the affected Phoenix Contact Fl Switch models to at least version 3.50.
3
What devices are affected by CVE-2025-41697?
CVE-2025-41697 affects various models of Phoenixcontact Fl Switch including 2708, 2608, 2516, and others running firmware versions prior to 3.50.
4
Can CVE-2025-41697 be exploited remotely?
CVE-2025-41697 requires physical access to the device through the undocumented UART port to exploit the vulnerability.
5
Is CVE-2025-41697 linked to other vulnerabilities?
Yes, CVE-2025-41697 is linked to CVE-2025-41692 as it utilizes credentials that could be obtained through that vulnerability.