Riskcovery

CVE-2025-41697

Shell access to UART Console

State
Published
Severity
6.8 Medium
Published
Dec 9, 2025
Updated
Dec 9, 2025
Reserved
Apr 16, 2025

Read the record on cve.org

Description

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

Scores

CVSSScoreVectorSource
3.16.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

  • CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface

Affected Products

ProductVersions
FL SWITCH 2005Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2008Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2016Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2105Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2108Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2116Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2204-2TC-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2205Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206-2FXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206-2FX SMPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206-2FX SM STPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206-2FX STPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206-2SFX PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2206C-2FXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2207-FXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2207-FX SMPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2208Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2208 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2208CPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2212-2TC-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2214-2FXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2214-2FX SMPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2214-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2214-2SFX PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2216Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2216 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2304-2GC-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2306-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2306-2SFP PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2308Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2308 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2312-2GC-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2314-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2314-2SFP PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2316Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2316 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2404-2TC-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2406-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2406-2SFX PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2408Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2408 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2412-2TC-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2414-2SFXPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2414-2SFX PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2416Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2416 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2504-2GC-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2506-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2506-2SFP PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2508Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2508 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2512-2GC-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2514-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2514-2SFP PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2516Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2516 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2608Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2608 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2708Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2708 PNPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2303-8SP1Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL NAT 2008Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL NAT 2208Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL NAT 2304-2GC-2SFPPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2008FPhoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2316/K1Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2506-2SFP/K1Phoenix Contact
  • 0.0.0 to before 3.50Affected
FL SWITCH 2508/K1Phoenix Contact
  • 0.0.0 to before 3.50Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.