CVE-2025-41696

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: CERT VDE

Description

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-09

Last Modified

2025-12-09

Generated

2026-07-06

AI Q&A

2025-12-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-41696

EUVD

EUVD-2025-201890

Affected Vendors & Products

Vendor	Product	Version / Range
phoenix_contact	fl_switch	3.50

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Mitigation Strategies

To mitigate this vulnerability, users should update the firmware of the affected Phoenix Contact FL SWITCH 2xxx series devices to version 3.50 or later, as this version resolves CVE-2025-41692 and related vulnerabilities. This update helps prevent unauthorized access via the undocumented UART port and hardcoded credentials. [1]

Executive Summary

This vulnerability involves an attacker exploiting an undocumented UART port on the device's PCB as a side-channel. Using hardcoded user credentials obtained from a related vulnerability (CVE-2025-41692), the attacker can gain read access to parts of the device's filesystem.

Impact Analysis

The vulnerability allows an attacker to read sensitive parts of the device's filesystem without authorization, potentially exposing confidential data or system information, which could lead to further exploitation or data breaches.

Hi! I’m here to help you understand CVE-2025-41696. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70