CVE-2025-41693
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: CERT VDE

Description
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-07-07
AI Q&A
2025-12-09
EPSS Evaluated
2026-07-05
NVD
CVE-2025-41693
EUVD
EUVD-2025-201889

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
phoenix_contact fl_switch 3.50
phoenix_contact fl_switch 3.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a low privileged remote attacker to use the SSH feature to execute commands directly after login. The process initiated by the attacker remains open and consumes system resources, which leads to reduced performance of the management functions. However, the switching functionality is not affected.

Impact Analysis

The vulnerability can impact you by causing reduced performance of management functions due to the attacker keeping processes open and consuming resources. This may degrade the system's ability to manage operations efficiently, although the switching functionality remains unaffected.

Mitigation Strategies

To mitigate this vulnerability, users should update the firmware of the affected devices to version 3.50 or later, as this version resolves related vulnerabilities. Since the vulnerability involves SSH command execution after login, limiting SSH access and monitoring for unusual SSH sessions may also help, but the primary mitigation is updating the firmware. [1]

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-41693. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart