Description (CNA)
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Phoenix Contact / FL SWITCH 2005 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2008 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2016 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2105 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2108 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2116 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2204-2TC-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2205 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206-2FX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206-2FX SM | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206-2FX SM ST | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206-2FX ST | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206-2SFX PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2206C-2FX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2207-FX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2207-FX SM | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2208 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2208 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2208C | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2212-2TC-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2214-2FX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2214-2FX SM | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2214-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2214-2SFX PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2216 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2216 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2304-2GC-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2306-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2306-2SFP PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2308 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2308 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2312-2GC-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2314-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2314-2SFP PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2316 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2316 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2404-2TC-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2406-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2406-2SFX PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2408 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2408 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2412-2TC-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2414-2SFX | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2414-2SFX PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2416 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2416 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2504-2GC-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2506-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2506-2SFP PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2508 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2508 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2512-2GC-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2514-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2514-2SFP PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2516 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2516 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2608 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2608 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2708 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2708 PN | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2303-8SP1 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL NAT 2008 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL NAT 2208 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL NAT 2304-2GC-2SFP | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2008F | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2316/K1 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2506-2SFP/K1 | affected 0.0.0 before 3.50 |
| Phoenix Contact / FL SWITCH 2508/K1 | affected 0.0.0 before 3.50 |
CWE
CWE-798
References
ADP enrichment
No English description supplied.
No references supplied.