1. Home
  2. Vulnerabilities
  3. CVE-2025-41748
7.1
HIGH CVSS 3.1
CVE-2025-41748
Reflected XSS vulnerability in pxc_Dot1xCfg.php
Description

An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.

INFO

Published Date :

Dec. 9, 2025, 4:17 p.m.

Last Modified :

Dec. 19, 2025, 4:45 p.m.

Remotely Exploit :

Yes !

Source :

[email protected]
Affected Products

The following products are affected by CVE-2025-41748 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Phoenixcontact fl_nat_2208_firmware
2 Phoenixcontact fl_nat_2304-2gc-2sfp_firmware
3 Phoenixcontact fl_switch_2005_firmware
4 Phoenixcontact fl_switch_2008_firmware
5 Phoenixcontact fl_switch_2008f_firmware
6 Phoenixcontact fl_switch_2016_firmware
7 Phoenixcontact fl_switch_2105_firmware
8 Phoenixcontact fl_switch_2108_firmware
9 Phoenixcontact fl_switch_2116_firmware
10 Phoenixcontact fl_switch_2204-2tc-2sfx_firmware
11 Phoenixcontact fl_switch_2206-2fx_firmware
12 Phoenixcontact fl_switch_2206-2fx_sm_firmware
13 Phoenixcontact fl_switch_2206-2fx_sm_st_firmware
14 Phoenixcontact fl_switch_2206-2fx_st_firmware
15 Phoenixcontact fl_switch_2206-2sfx_firmware
16 Phoenixcontact fl_switch_2206-2sfx_pn_firmware
17 Phoenixcontact fl_switch_2206c-2fx_firmware
18 Phoenixcontact fl_switch_2207-fx_firmware
19 Phoenixcontact fl_switch_2207-fx_sm_firmware
20 Phoenixcontact fl_switch_2208_firmware
21 Phoenixcontact fl_switch_2208c_firmware
22 Phoenixcontact fl_switch_2208_pn_firmware
23 Phoenixcontact fl_switch_2212-2tc-2sfx_firmware
24 Phoenixcontact fl_switch_2214-2fx_firmware
25 Phoenixcontact fl_switch_2214-2fx_sm_firmware
26 Phoenixcontact fl_switch_2214-2sfx_firmware
27 Phoenixcontact fl_switch_2214-2sfx_pn_firmware
28 Phoenixcontact fl_switch_2216_firmware
29 Phoenixcontact fl_switch_2216_pn_firmware
30 Phoenixcontact fl_switch_2304-2gc-2sfp_firmware
31 Phoenixcontact fl_switch_2306-2sfp_firmware
32 Phoenixcontact fl_switch_2306-2sfp_pn_firmware
33 Phoenixcontact fl_switch_2308_firmware
34 Phoenixcontact fl_switch_2308_pn_firmware
35 Phoenixcontact fl_switch_2312-2gc-2sfp_firmware
36 Phoenixcontact fl_switch_2314-2sfp_firmware
37 Phoenixcontact fl_switch_2314-2sfp_pn_firmware
38 Phoenixcontact fl_switch_2316_firmware
39 Phoenixcontact fl_switch_2316\/k1_firmware
40 Phoenixcontact fl_switch_2316_pn_firmware
41 Phoenixcontact fl_switch_2404-2tc-2sfx_firmware
42 Phoenixcontact fl_switch_2406-2sfx_firmware
43 Phoenixcontact fl_switch_2406-2sfx_pn_firmware
44 Phoenixcontact fl_switch_2408_firmware
45 Phoenixcontact fl_switch_2408_pn_firmware
46 Phoenixcontact fl_switch_2412-2tc-2sfx_firmware
47 Phoenixcontact fl_switch_2414-2sfx_firmware
48 Phoenixcontact fl_switch_2414-2sfx_pn_firmware
49 Phoenixcontact fl_switch_2416_firmware
50 Phoenixcontact fl_switch_2416_pn_firmware
51 Phoenixcontact fl_switch_2504-2gc-2sfp_firmware
52 Phoenixcontact fl_switch_2506-2sfp_firmware
53 Phoenixcontact fl_switch_2506-2sfp\/k1_firmware
54 Phoenixcontact fl_switch_2506-2sfp_pn_firmware
55 Phoenixcontact fl_switch_2508_firmware
56 Phoenixcontact fl_switch_2508\/k1_firmware
57 Phoenixcontact fl_switch_2508_pn_firmware
58 Phoenixcontact fl_switch_2512-2gc-2sfp_firmware
59 Phoenixcontact fl_switch_2514-2sfp_firmware
60 Phoenixcontact fl_switch_2514-2sfp_pn_firmware
61 Phoenixcontact fl_switch_2516_firmware
62 Phoenixcontact fl_switch_2516_pn_firmware
63 Phoenixcontact fl_switch_2608_firmware
64 Phoenixcontact fl_switch_2608_pn_firmware
65 Phoenixcontact fl_switch_2708_firmware
66 Phoenixcontact fl_switch_2708_pn_firmware
67 Phoenixcontact fl_switch_2205_firmware
68 Phoenixcontact fl_nat_2208
69 Phoenixcontact fl_nat_2304-2gc-2sfp
70 Phoenixcontact fl_switch_2005
71 Phoenixcontact fl_switch_2008
72 Phoenixcontact fl_switch_2008f
73 Phoenixcontact fl_switch_2016
74 Phoenixcontact fl_switch_2105
75 Phoenixcontact fl_switch_2108
76 Phoenixcontact fl_switch_2116
77 Phoenixcontact fl_switch_2204-2tc-2sfx
78 Phoenixcontact fl_switch_2206-2fx
79 Phoenixcontact fl_switch_2206-2fx_sm
80 Phoenixcontact fl_switch_2206-2fx_sm_st
81 Phoenixcontact fl_switch_2206-2fx_st
82 Phoenixcontact fl_switch_2206-2sfx
83 Phoenixcontact fl_switch_2206-2sfx_pn
84 Phoenixcontact fl_switch_2206c-2fx
85 Phoenixcontact fl_switch_2207-fx
86 Phoenixcontact fl_switch_2207-fx_sm
87 Phoenixcontact fl_switch_2208
88 Phoenixcontact fl_switch_2208c
89 Phoenixcontact fl_switch_2208_pn
90 Phoenixcontact fl_switch_2212-2tc-2sfx
91 Phoenixcontact fl_switch_2214-2fx
92 Phoenixcontact fl_switch_2214-2fx_sm
93 Phoenixcontact fl_switch_2214-2sfx
94 Phoenixcontact fl_switch_2214-2sfx_pn
95 Phoenixcontact fl_switch_2216
96 Phoenixcontact fl_switch_2216_pn
97 Phoenixcontact fl_switch_2304-2gc-2sfp
98 Phoenixcontact fl_switch_2306-2sfp
99 Phoenixcontact fl_switch_2306-2sfp_pn
100 Phoenixcontact fl_switch_2308
101 Phoenixcontact fl_switch_2308_pn
102 Phoenixcontact fl_switch_2312-2gc-2sfp
103 Phoenixcontact fl_switch_2314-2sfp
104 Phoenixcontact fl_switch_2314-2sfp_pn
105 Phoenixcontact fl_switch_2316
106 Phoenixcontact fl_switch_2316\/k1
107 Phoenixcontact fl_switch_2316_pn
108 Phoenixcontact fl_switch_2404-2tc-2sfx
109 Phoenixcontact fl_switch_2406-2sfx
110 Phoenixcontact fl_switch_2406-2sfx_pn
111 Phoenixcontact fl_switch_2408
112 Phoenixcontact fl_switch_2408_pn
113 Phoenixcontact fl_switch_2412-2tc-2sfx
114 Phoenixcontact fl_switch_2414-2sfx
115 Phoenixcontact fl_switch_2414-2sfx_pn
116 Phoenixcontact fl_switch_2416
117 Phoenixcontact fl_switch_2416_pn
118 Phoenixcontact fl_switch_2504-2gc-2sfp
119 Phoenixcontact fl_switch_2506-2sfp
120 Phoenixcontact fl_switch_2506-2sfp\/k1
121 Phoenixcontact fl_switch_2506-2sfp_pn
122 Phoenixcontact fl_switch_2508
123 Phoenixcontact fl_switch_2508\/k1
124 Phoenixcontact fl_switch_2508_pn
125 Phoenixcontact fl_switch_2512-2gc-2sfp
126 Phoenixcontact fl_switch_2514-2sfp
127 Phoenixcontact fl_switch_2514-2sfp_pn
128 Phoenixcontact fl_switch_2516
129 Phoenixcontact fl_switch_2516_pn
130 Phoenixcontact fl_switch_2608
131 Phoenixcontact fl_switch_2608_pn
132 Phoenixcontact fl_switch_2708
133 Phoenixcontact fl_switch_2708_pn
134 Phoenixcontact fl_switch_2205
135 Phoenixcontact fl_nat_2008_firmware
136 Phoenixcontact fl_nat_2008
137 Phoenixcontact fl_switch_2303-8sp1
138 Phoenixcontact fl_switch_2303-8sp1
: Total Affected Vendor : 1 | Products : 138
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 HIGH MITRE-CVE
CVSS 3.1 HIGH [email protected]
Solution
Fix an XSS vulnerability in pxc_Dot1xCfg.php to prevent parameter manipulation.
  • Update the affected software component.
  • Apply vendor-provided security patches.
  • Review and sanitize user inputs.
  • Implement output encoding for web interfaces.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-41748.

URL Resource
https://certvde.com/de/advisories/VDE-2025-071 Vendor Advisory
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-41748 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-41748 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-41748 vulnerability anywhere in the article.

  • seclists.org
CyberDanube Security Research 20251215-0 | Multiple Vulnerabilities in Phoenix Contact FL Switch Series

Full Disclosure mailing list archives CyberDanube Security Research 20251215-0 | Multiple Vulnerabilities in Phoenix Contact FL Switch Series From: Thomas Weber | CyberDanube via Fulldisclosure <fulld ... Read more

Published Date: Dec 18, 2025 (1 day, 15 hours ago)

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2025-41748 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Dec. 19, 2025

    Action Type Old Value New Value
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_nat_2008_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_nat_2008:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_nat_2208_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_nat_2208:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_nat_2304-2gc-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_nat_2304-2gc-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2005_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2005:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2008_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2008:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2406-2sfx_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2406-2sfx_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2408_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2408:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2408_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2408_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2412-2tc-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2412-2tc-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2414-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2414-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2414-2sfx_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2414-2sfx_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2416_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2416:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2416_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2416_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2504-2gc-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2504-2gc-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2506-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2506-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2506-2sfp/k1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2506-2sfp/k1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2506-2sfp_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2506-2sfp_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2508_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2508:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2508/k1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2508/k1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2508_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2508_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2512-2gc-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2512-2gc-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2514-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2514-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2514-2sfp_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2514-2sfp_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2516_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2516:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2516_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2516_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2608_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2608:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2608_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2608_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2708_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2708:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2708_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2708_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2008f_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2008f:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2016_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2016:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2105_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2105:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2108_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2108:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2116_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2116:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2204-2tc-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2204-2tc-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2205_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2205:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206-2fx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206-2fx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206-2fx_sm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206-2fx_sm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206-2fx_sm_st_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206-2fx_sm_st:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206-2fx_st_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206-2fx_st:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206-2sfx_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206-2sfx_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2206c-2fx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2206c-2fx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2207-fx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2207-fx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2207-fx_sm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2207-fx_sm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2208_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2208:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2208_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2208_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2208c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2208c:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2212-2tc-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2212-2tc-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2214-2fx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2214-2fx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2214-2fx_sm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2214-2fx_sm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2214-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2214-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2214-2sfx_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2214-2sfx_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2216_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2216:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2216_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2216_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2303-8sp1:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2303-8sp1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2304-2gc-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2304-2gc-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2306-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2306-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2306-2sfp_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2306-2sfp_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2308_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2308:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2308_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2308_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2312-2gc-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2312-2gc-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2314-2sfp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2314-2sfp:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2314-2sfp_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2314-2sfp_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2316_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2316:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2316/k1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2316/k1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2316_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2316_pn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2404-2tc-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2404-2tc-2sfx:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:phoenixcontact:fl_switch_2406-2sfx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.50 OR cpe:2.3:h:phoenixcontact:fl_switch_2406-2sfx:-:*:*:*:*:*:*:*
    Added Reference Type CERT VDE: https://certvde.com/de/advisories/VDE-2025-071 Types: Vendor Advisory
  • New CVE Received by [email protected]

    Dec. 09, 2025

    Action Type Old Value New Value
    Added Description An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
    Added CWE CWE-79
    Added Reference https://certvde.com/de/advisories/VDE-2025-071
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
Base CVSS Score: 7.1
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact