---
id: CVE-2025-41692
title: >-
  A high privileged remote attacker with admin privileges for the webUI can
  brute-force the "root" and "user" passwords of the underlying OS due to a weak
  password generation algorithm.
summary: >-
  A high privileged remote attacker with admin privileges for the webUI can
  brute-force the "root" and "user" passwords of the underlying OS due to a weak
  password generation algorithm.
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N'
cwe:
  - CWE-916
vendor: phoenixcontact
product: fl_switch_2708_pn_firmware
affected:
  - fl_switch_2708_pn_firmware < 3.50
  - fl_switch_2708_firmware < 3.50
  - fl_switch_2608_pn_firmware < 3.50
  - fl_switch_2608_firmware < 3.50
  - fl_switch_2516_pn_firmware < 3.50
  - fl_switch_2208c_firmware < 3.50
  - fl_switch_2208_pn_firmware < 3.50
  - fl_switch_2208_firmware < 3.50
  - fl_switch_2207-fx_sm_firmware < 3.50
  - fl_switch_2207-fx_firmware < 3.50
  - fl_switch_2206c-2fx_firmware < 3.50
  - fl_switch_2206-2sfx_pn_firmware < 3.50
  - fl_switch_2206-2sfx_firmware < 3.50
  - fl_switch_2206-2fx_st_firmware < 3.50
  - fl_switch_2206-2fx_sm_st_firmware < 3.50
  - fl_switch_2206-2fx_sm_firmware < 3.50
  - fl_switch_2206-2fx_firmware < 3.50
  - fl_switch_2205_firmware < 3.50
  - fl_switch_2204-2tc-2sfx_firmware < 3.50
  - fl_switch_2116_firmware < 3.50
  - fl_switch_2108_firmware < 3.50
  - fl_switch_2105_firmware < 3.50
  - fl_switch_2016_firmware < 3.50
  - fl_switch_2008f_firmware < 3.50
  - fl_switch_2008_firmware < 3.50
  - fl_switch_2005_firmware < 3.50
  - fl_nat_2304-2gc-2sfp_firmware < 3.50
  - fl_nat_2208_firmware < 3.50
  - fl_nat_2008_firmware < 3.50
  - fl_switch_2516_firmware < 3.50
  - fl_switch_2514-2sfp_pn_firmware < 3.50
  - fl_switch_2514-2sfp_firmware < 3.50
  - fl_switch_2512-2gc-2sfp_firmware < 3.50
  - fl_switch_2508_pn_firmware < 3.50
  - fl_switch_2508/k1_firmware < 3.50
  - fl_switch_2508_firmware < 3.50
  - fl_switch_2506-2sfp_pn_firmware < 3.50
  - fl_switch_2506-2sfp/k1_firmware < 3.50
  - fl_switch_2506-2sfp_firmware < 3.50
  - fl_switch_2504-2gc-2sfp_firmware < 3.50
  - fl_switch_2416_pn_firmware < 3.50
  - fl_switch_2416_firmware < 3.50
  - fl_switch_2414-2sfx_pn_firmware < 3.50
  - fl_switch_2414-2sfx_firmware < 3.50
  - fl_switch_2412-2tc-2sfx_firmware < 3.50
  - fl_switch_2408_pn_firmware < 3.50
  - fl_switch_2408_firmware < 3.50
  - fl_switch_2406-2sfx_pn_firmware < 3.50
  - fl_switch_2406-2sfx_firmware < 3.50
  - fl_switch_2404-2tc-2sfx_firmware < 3.50
  - fl_switch_2316_pn_firmware < 3.50
  - fl_switch_2316/k1_firmware < 3.50
  - fl_switch_2316_firmware < 3.50
  - fl_switch_2314-2sfp_pn_firmware < 3.50
  - fl_switch_2314-2sfp_firmware < 3.50
  - fl_switch_2312-2gc-2sfp_firmware < 3.50
  - fl_switch_2308_pn_firmware < 3.50
  - fl_switch_2308_firmware < 3.50
  - fl_switch_2306-2sfp_pn_firmware < 3.50
  - fl_switch_2306-2sfp_firmware < 3.50
  - fl_switch_2304-2gc-2sfp_firmware < 3.50
  - fl_switch_2303-8sp1 < 3.50
  - fl_switch_2216_pn_firmware < 3.50
  - fl_switch_2216_firmware < 3.50
  - fl_switch_2214-2sfx_pn_firmware < 3.50
  - fl_switch_2214-2sfx_firmware < 3.50
  - fl_switch_2214-2fx_sm_firmware < 3.50
  - fl_switch_2214-2fx_firmware < 3.50
  - fl_switch_2212-2tc-2sfx_firmware < 3.50
patched:
  - fl_switch_2708_pn_firmware 3.50
  - fl_switch_2708_firmware 3.50
  - fl_switch_2608_pn_firmware 3.50
  - fl_switch_2608_firmware 3.50
  - fl_switch_2516_pn_firmware 3.50
  - fl_switch_2208c_firmware 3.50
  - fl_switch_2208_pn_firmware 3.50
  - fl_switch_2208_firmware 3.50
  - fl_switch_2207-fx_sm_firmware 3.50
  - fl_switch_2207-fx_firmware 3.50
  - fl_switch_2206c-2fx_firmware 3.50
  - fl_switch_2206-2sfx_pn_firmware 3.50
  - fl_switch_2206-2sfx_firmware 3.50
  - fl_switch_2206-2fx_st_firmware 3.50
  - fl_switch_2206-2fx_sm_st_firmware 3.50
  - fl_switch_2206-2fx_sm_firmware 3.50
  - fl_switch_2206-2fx_firmware 3.50
  - fl_switch_2205_firmware 3.50
  - fl_switch_2204-2tc-2sfx_firmware 3.50
  - fl_switch_2116_firmware 3.50
  - fl_switch_2108_firmware 3.50
  - fl_switch_2105_firmware 3.50
  - fl_switch_2016_firmware 3.50
  - fl_switch_2008f_firmware 3.50
  - fl_switch_2008_firmware 3.50
  - fl_switch_2005_firmware 3.50
  - fl_nat_2304-2gc-2sfp_firmware 3.50
  - fl_nat_2208_firmware 3.50
  - fl_nat_2008_firmware 3.50
  - fl_switch_2516_firmware 3.50
  - fl_switch_2514-2sfp_pn_firmware 3.50
  - fl_switch_2514-2sfp_firmware 3.50
  - fl_switch_2512-2gc-2sfp_firmware 3.50
  - fl_switch_2508_pn_firmware 3.50
  - fl_switch_2508/k1_firmware 3.50
  - fl_switch_2508_firmware 3.50
  - fl_switch_2506-2sfp_pn_firmware 3.50
  - fl_switch_2506-2sfp/k1_firmware 3.50
  - fl_switch_2506-2sfp_firmware 3.50
  - fl_switch_2504-2gc-2sfp_firmware 3.50
  - fl_switch_2416_pn_firmware 3.50
  - fl_switch_2416_firmware 3.50
  - fl_switch_2414-2sfx_pn_firmware 3.50
  - fl_switch_2414-2sfx_firmware 3.50
  - fl_switch_2412-2tc-2sfx_firmware 3.50
  - fl_switch_2408_pn_firmware 3.50
  - fl_switch_2408_firmware 3.50
  - fl_switch_2406-2sfx_pn_firmware 3.50
  - fl_switch_2406-2sfx_firmware 3.50
  - fl_switch_2404-2tc-2sfx_firmware 3.50
  - fl_switch_2316_pn_firmware 3.50
  - fl_switch_2316/k1_firmware 3.50
  - fl_switch_2316_firmware 3.50
  - fl_switch_2314-2sfp_pn_firmware 3.50
  - fl_switch_2314-2sfp_firmware 3.50
  - fl_switch_2312-2gc-2sfp_firmware 3.50
  - fl_switch_2308_pn_firmware 3.50
  - fl_switch_2308_firmware 3.50
  - fl_switch_2306-2sfp_pn_firmware 3.50
  - fl_switch_2306-2sfp_firmware 3.50
  - fl_switch_2304-2gc-2sfp_firmware 3.50
  - fl_switch_2303-8sp1 3.50
  - fl_switch_2216_pn_firmware 3.50
  - fl_switch_2216_firmware 3.50
  - fl_switch_2214-2sfx_pn_firmware 3.50
  - fl_switch_2214-2sfx_firmware 3.50
  - fl_switch_2214-2fx_sm_firmware 3.50
  - fl_switch_2214-2fx_firmware 3.50
  - fl_switch_2212-2tc-2sfx_firmware 3.50
published: '2025-12-09'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T20:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-41692'
references:
  - url: 'https://certvde.com/de/advisories/VDE-2025-071'
    label: info@cert.vde.com
tags:
  - nvd
epss: 0.00297
epssPercentile: 0.20166
ingestedAt: '2026-09-30T20:23:19.436Z'
---

## Overview

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

## Affected

- `fl_switch_2708_pn_firmware < 3.50`
- `fl_switch_2708_firmware < 3.50`
- `fl_switch_2608_pn_firmware < 3.50`
- `fl_switch_2608_firmware < 3.50`
- `fl_switch_2516_pn_firmware < 3.50`
- `fl_switch_2208c_firmware < 3.50`
- `fl_switch_2208_pn_firmware < 3.50`
- `fl_switch_2208_firmware < 3.50`
- `fl_switch_2207-fx_sm_firmware < 3.50`
- `fl_switch_2207-fx_firmware < 3.50`
- `fl_switch_2206c-2fx_firmware < 3.50`
- `fl_switch_2206-2sfx_pn_firmware < 3.50`
- `fl_switch_2206-2sfx_firmware < 3.50`
- `fl_switch_2206-2fx_st_firmware < 3.50`
- `fl_switch_2206-2fx_sm_st_firmware < 3.50`
- `fl_switch_2206-2fx_sm_firmware < 3.50`
- `fl_switch_2206-2fx_firmware < 3.50`
- `fl_switch_2205_firmware < 3.50`
- `fl_switch_2204-2tc-2sfx_firmware < 3.50`
- `fl_switch_2116_firmware < 3.50`
- `fl_switch_2108_firmware < 3.50`
- `fl_switch_2105_firmware < 3.50`
- `fl_switch_2016_firmware < 3.50`
- `fl_switch_2008f_firmware < 3.50`
- `fl_switch_2008_firmware < 3.50`
- `fl_switch_2005_firmware < 3.50`
- `fl_nat_2304-2gc-2sfp_firmware < 3.50`
- `fl_nat_2208_firmware < 3.50`
- `fl_nat_2008_firmware < 3.50`
- `fl_switch_2516_firmware < 3.50`
- `fl_switch_2514-2sfp_pn_firmware < 3.50`
- `fl_switch_2514-2sfp_firmware < 3.50`
- `fl_switch_2512-2gc-2sfp_firmware < 3.50`
- `fl_switch_2508_pn_firmware < 3.50`
- `fl_switch_2508/k1_firmware < 3.50`
- `fl_switch_2508_firmware < 3.50`
- `fl_switch_2506-2sfp_pn_firmware < 3.50`
- `fl_switch_2506-2sfp/k1_firmware < 3.50`
- `fl_switch_2506-2sfp_firmware < 3.50`
- `fl_switch_2504-2gc-2sfp_firmware < 3.50`
- `fl_switch_2416_pn_firmware < 3.50`
- `fl_switch_2416_firmware < 3.50`
- `fl_switch_2414-2sfx_pn_firmware < 3.50`
- `fl_switch_2414-2sfx_firmware < 3.50`
- `fl_switch_2412-2tc-2sfx_firmware < 3.50`
- `fl_switch_2408_pn_firmware < 3.50`
- `fl_switch_2408_firmware < 3.50`
- `fl_switch_2406-2sfx_pn_firmware < 3.50`
- `fl_switch_2406-2sfx_firmware < 3.50`
- `fl_switch_2404-2tc-2sfx_firmware < 3.50`
- `fl_switch_2316_pn_firmware < 3.50`
- `fl_switch_2316/k1_firmware < 3.50`
- `fl_switch_2316_firmware < 3.50`
- `fl_switch_2314-2sfp_pn_firmware < 3.50`
- `fl_switch_2314-2sfp_firmware < 3.50`
- `fl_switch_2312-2gc-2sfp_firmware < 3.50`
- `fl_switch_2308_pn_firmware < 3.50`
- `fl_switch_2308_firmware < 3.50`
- `fl_switch_2306-2sfp_pn_firmware < 3.50`
- `fl_switch_2306-2sfp_firmware < 3.50`
- `fl_switch_2304-2gc-2sfp_firmware < 3.50`
- `fl_switch_2303-8sp1 < 3.50`
- `fl_switch_2216_pn_firmware < 3.50`
- `fl_switch_2216_firmware < 3.50`
- `fl_switch_2214-2sfx_pn_firmware < 3.50`
- `fl_switch_2214-2sfx_firmware < 3.50`
- `fl_switch_2214-2fx_sm_firmware < 3.50`
- `fl_switch_2214-2fx_firmware < 3.50`
- `fl_switch_2212-2tc-2sfx_firmware < 3.50`

## Remediation

Upgrade past the affected range:

- `fl_switch_2708_pn_firmware 3.50`
- `fl_switch_2708_firmware 3.50`
- `fl_switch_2608_pn_firmware 3.50`
- `fl_switch_2608_firmware 3.50`
- `fl_switch_2516_pn_firmware 3.50`
- `fl_switch_2208c_firmware 3.50`
- `fl_switch_2208_pn_firmware 3.50`
- `fl_switch_2208_firmware 3.50`
- `fl_switch_2207-fx_sm_firmware 3.50`
- `fl_switch_2207-fx_firmware 3.50`
- `fl_switch_2206c-2fx_firmware 3.50`
- `fl_switch_2206-2sfx_pn_firmware 3.50`
- `fl_switch_2206-2sfx_firmware 3.50`
- `fl_switch_2206-2fx_st_firmware 3.50`
- `fl_switch_2206-2fx_sm_st_firmware 3.50`
- `fl_switch_2206-2fx_sm_firmware 3.50`
- `fl_switch_2206-2fx_firmware 3.50`
- `fl_switch_2205_firmware 3.50`
- `fl_switch_2204-2tc-2sfx_firmware 3.50`
- `fl_switch_2116_firmware 3.50`
- `fl_switch_2108_firmware 3.50`
- `fl_switch_2105_firmware 3.50`
- `fl_switch_2016_firmware 3.50`
- `fl_switch_2008f_firmware 3.50`
- `fl_switch_2008_firmware 3.50`
- `fl_switch_2005_firmware 3.50`
- `fl_nat_2304-2gc-2sfp_firmware 3.50`
- `fl_nat_2208_firmware 3.50`
- `fl_nat_2008_firmware 3.50`
- `fl_switch_2516_firmware 3.50`
- `fl_switch_2514-2sfp_pn_firmware 3.50`
- `fl_switch_2514-2sfp_firmware 3.50`
- `fl_switch_2512-2gc-2sfp_firmware 3.50`
- `fl_switch_2508_pn_firmware 3.50`
- `fl_switch_2508/k1_firmware 3.50`
- `fl_switch_2508_firmware 3.50`
- `fl_switch_2506-2sfp_pn_firmware 3.50`
- `fl_switch_2506-2sfp/k1_firmware 3.50`
- `fl_switch_2506-2sfp_firmware 3.50`
- `fl_switch_2504-2gc-2sfp_firmware 3.50`
- `fl_switch_2416_pn_firmware 3.50`
- `fl_switch_2416_firmware 3.50`
- `fl_switch_2414-2sfx_pn_firmware 3.50`
- `fl_switch_2414-2sfx_firmware 3.50`
- `fl_switch_2412-2tc-2sfx_firmware 3.50`
- `fl_switch_2408_pn_firmware 3.50`
- `fl_switch_2408_firmware 3.50`
- `fl_switch_2406-2sfx_pn_firmware 3.50`
- `fl_switch_2406-2sfx_firmware 3.50`
- `fl_switch_2404-2tc-2sfx_firmware 3.50`
- `fl_switch_2316_pn_firmware 3.50`
- `fl_switch_2316/k1_firmware 3.50`
- `fl_switch_2316_firmware 3.50`
- `fl_switch_2314-2sfp_pn_firmware 3.50`
- `fl_switch_2314-2sfp_firmware 3.50`
- `fl_switch_2312-2gc-2sfp_firmware 3.50`
- `fl_switch_2308_pn_firmware 3.50`
- `fl_switch_2308_firmware 3.50`
- `fl_switch_2306-2sfp_pn_firmware 3.50`
- `fl_switch_2306-2sfp_firmware 3.50`
- `fl_switch_2304-2gc-2sfp_firmware 3.50`
- `fl_switch_2303-8sp1 3.50`
- `fl_switch_2216_pn_firmware 3.50`
- `fl_switch_2216_firmware 3.50`
- `fl_switch_2214-2sfx_pn_firmware 3.50`
- `fl_switch_2214-2sfx_firmware 3.50`
- `fl_switch_2214-2fx_sm_firmware 3.50`
- `fl_switch_2214-2fx_firmware 3.50`
- `fl_switch_2212-2tc-2sfx_firmware 3.50`