CVE-2025-41697mediumCWE-1299

CVE-2025-41697: medium-severity vulnerability in Phoenix Contact FL NAT 2008

Shell access to UART Console

Published 09 Dec 2025

Follow this CVE + Monitor FL SWITCH + Monitor FL NAT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.3%

In short

A hidden UART port on the device's circuit board allows an attacker to gain root access to the system, especially when combined with leaked credentials. This bypasses normal security protections by providing direct hardware-level access.

Technical detail

CWE-1299 describes exposure of sensitive information through a side-channel. An attacker with physical access to the PCB can connect to an undocumented UART serial interface to establish a privileged shell session, potentially using credentials obtained from CVE-2025-41692. This requires physical proximity to the device hardware but provides complete system compromise.

Summary generated and translated by AI from the official description.

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Related CVEs — Phoenix Contact FL NAT 2008

In the same product, most dangerous first.

CVE-2025-41746HIGHReflected XSS vulnerability in pxc_portSecCfg.phpEPSS 10.4%CVE-2025-41747HIGHReflected XSS vulnerability in pxc_vlanIntfCfg.phpEPSS 10.4%CVE-2025-41748HIGHReflected XSS vulnerability in pxc_Dot1xCfg.phpEPSS 10.4%CVE-2025-41750HIGHReflected XSS vulnerability in pxc_PortCfg.phpEPSS 10.4%CVE-2025-41751HIGHReflected XSS vulnerability in pxc_portCntr.phpEPSS 10.4%CVE-2025-41752HIGHReflected XSS vulnerability in pxc_portSfp.phpEPSS 10.4%

References

https://certvde.com/de/advisories/VDE-2025-071