CVE-2025-41697
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: CERT VDE

Description
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-06-16
AI Q&A
2025-12-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-41697
EUVD
EUVD-2025-201893
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
phoenix_contact fl_switch 3.50
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1299 The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves an undocumented UART port on the device's PCB that an attacker can exploit as a side-channel to gain root access, for example by using credentials obtained from a related vulnerability (CVE-2025-41692).

Impact Analysis

An attacker exploiting this vulnerability can gain root access to the device, potentially leading to full control over the system, compromising confidentiality, integrity, and availability of data and services.

Mitigation Strategies

To mitigate this vulnerability, users should update the firmware of affected Phoenix Contact FL SWITCH 2xxx series devices to version 3.50 or later, as this version resolves CVE-2025-41692 and related vulnerabilities. Since CVE-2025-41697 involves an undocumented UART port used as a side-channel for root access, physical security measures to restrict access to the device's PCB and UART ports should also be implemented to prevent exploitation. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-41697. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart