CVE-2025-41693

moderate-risk

Published 2025-12-09

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

Do I need to act?

0.40% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Affected Products (20)

Fl Switch 2708 Pn Firmware

Fl Switch 2708 Firmware

Fl Switch 2608 Pn Firmware

Fl Switch 2608 Firmware

Fl Switch 2516 Pn Firmware

Fl Switch 2516 Firmware

Fl Switch 2514-2Sfp Pn Firmware

Fl Switch 2514-2Sfp Firmware

Fl Switch 2512-2Gc-2Sfp Firmware

Fl Switch 2508 Pn Firmware

Fl Switch 2508\/K1 Firmware

Fl Switch 2508 Firmware

Fl Switch 2506-2Sfp Pn Firmware

Fl Switch 2506-2Sfp\/K1 Firmware

Fl Switch 2506-2Sfp Firmware

Fl Switch 2504-2Gc-2Sfp Firmware

Fl Switch 2416 Pn Firmware

Fl Switch 2416 Firmware

Fl Switch 2414-2Sfx Pn Firmware

Fl Switch 2414-2Sfx Firmware

Affected Vendors

Phoenixcontact

References (1)

Third Party Advisory https://certvde.com/de/advisories/VDE-2025-071

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 2/34 · Minimal

Exposure 28/34 · Critical