CVE-2025-41694

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: CERT VDE

Description

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-09

Last Modified

2025-12-09

Generated

2026-07-06

AI Q&A

2025-12-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-41694

EUVD

EUVD-2025-201891

Affected Vendors & Products

Vendor	Product	Version / Range
phoenix_contact	fl_switch	3.50
phoenix_contact	fl_switch	2xxx

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Mitigation Strategies

The provided resources do not specify immediate mitigation steps for CVE-2025-41694. However, since the vulnerability involves a denial of service condition triggered by a remote attacker sending an empty command with whitespace to the webshell, general mitigation would include monitoring and restricting access to the webshell interface and applying any available firmware updates from the vendor. No specific commands or patches are mentioned in the resources.

Executive Summary

This vulnerability allows a low privileged remote attacker to run the webshell with an empty command that contains only whitespace. When this happens, the server blocks and waits for more data, causing a denial of service (DoS) condition on the webserver.

Impact Analysis

The impact of this vulnerability is a denial of service (DoS) condition on the webserver, which means the server becomes unresponsive or unavailable to legitimate users.

Hi! I’m here to help you understand CVE-2025-41694. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70