CVE-2025-41692 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 MEDIUM	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CERTVDE	CNA	6.8 MEDIUM	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 5%

Affected Products (NVD)

Vendor	Product	Version
phoenixcontact	fl_switch_2708_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2708_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2608_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2608_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2516_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2208c_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2208_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2208_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2207-fx_sm_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2207-fx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206c-2fx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206-2sfx_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206-2fx_st_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206-2fx_sm_st_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206-2fx_sm_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2206-2fx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2205_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2204-2tc-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2116_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2108_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2105_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2016_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2008f_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2008_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2005_firmware	𝑥 < 3.50
phoenixcontact	fl_nat_2304-2gc-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_nat_2208_firmware	𝑥 < 3.50
phoenixcontact	fl_nat_2008_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2516_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2514-2sfp_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2514-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2512-2gc-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2508_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2508\/k1_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2508_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2506-2sfp_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2506-2sfp\/k1_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2506-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2504-2gc-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2416_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2416_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2414-2sfx_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2414-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2412-2tc-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2408_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2408_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2406-2sfx_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2406-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2404-2tc-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2316_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2316\/k1_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2316_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2314-2sfp_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2314-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2312-2gc-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2308_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2308_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2306-2sfp_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2306-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2304-2gc-2sfp_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2303-8sp1	𝑥 < 3.50
phoenixcontact	fl_switch_2216_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2216_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2214-2sfx_pn_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2214-2sfx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2214-2fx_sm_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2214-2fx_firmware	𝑥 < 3.50
phoenixcontact	fl_switch_2212-2tc-2sfx_firmware	𝑥 < 3.50

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-916 - Use of Password Hash With Insufficient Computational Effort
The software generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

References

https://certvde.com/de/advisories/VDE-2025-071