CVE-2025-41697
Shell access to UART Console
In short
A hidden UART port on the device's circuit board allows an attacker to gain root access to the system, especially when combined with leaked credentials. This bypasses normal security protections by providing direct hardware-level access.
Technical detail
CWE-1299 describes exposure of sensitive information through a side-channel. An attacker with physical access to the PCB can connect to an undocumented UART serial interface to establish a privileged shell session, potentially using credentials obtained from CVE-2025-41692. This requires physical proximity to the device hardware but provides complete system compromise.
Summary generated and translated by AI from the official description.
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Phoenix Contact · FL NAT 2008Phoenix Contact · FL NAT 2208Phoenix Contact · FL NAT 2304-2GC-2SFPPhoenix Contact · FL SWITCH 2005Phoenix Contact · FL SWITCH 2008Phoenix Contact · FL SWITCH 2008FPhoenix Contact · FL SWITCH 2016Phoenix Contact · FL SWITCH 2105Phoenix Contact · FL SWITCH 2108Phoenix Contact · FL SWITCH 2116Phoenix Contact · FL SWITCH 2204-2TC-2SFXPhoenix Contact · FL SWITCH 2205Phoenix Contact · FL SWITCH 2206-2FXPhoenix Contact · FL SWITCH 2206-2FX SMPhoenix Contact · FL SWITCH 2206-2FX SM STPhoenix Contact · FL SWITCH 2206-2FX STPhoenix Contact · FL SWITCH 2206-2SFXPhoenix Contact · FL SWITCH 2206-2SFX PNPhoenix Contact · FL SWITCH 2206C-2FXPhoenix Contact · FL SWITCH 2207-FXPhoenix Contact · FL SWITCH 2207-FX SMPhoenix Contact · FL SWITCH 2208Phoenix Contact · FL SWITCH 2208CPhoenix Contact · FL SWITCH 2208 PNPhoenix Contact · FL SWITCH 2212-2TC-2SFXPhoenix Contact · FL SWITCH 2214-2FXPhoenix Contact · FL SWITCH 2214-2FX SMPhoenix Contact · FL SWITCH 2214-2SFXPhoenix Contact · FL SWITCH 2214-2SFX PNPhoenix Contact · FL SWITCH 2216Phoenix Contact · FL SWITCH 2216 PNPhoenix Contact · FL SWITCH 2303-8SP1Phoenix Contact · FL SWITCH 2304-2GC-2SFPPhoenix Contact · FL SWITCH 2306-2SFPPhoenix Contact · FL SWITCH 2306-2SFP PNPhoenix Contact · FL SWITCH 2308Phoenix Contact · FL SWITCH 2308 PNPhoenix Contact · FL SWITCH 2312-2GC-2SFPPhoenix Contact · FL SWITCH 2314-2SFPPhoenix Contact · FL SWITCH 2314-2SFP PNPhoenix Contact · FL SWITCH 2316Phoenix Contact · FL SWITCH 2316/K1Phoenix Contact · FL SWITCH 2316 PNPhoenix Contact · FL SWITCH 2404-2TC-2SFXPhoenix Contact · FL SWITCH 2406-2SFXPhoenix Contact · FL SWITCH 2406-2SFX PNPhoenix Contact · FL SWITCH 2408Phoenix Contact · FL SWITCH 2408 PNPhoenix Contact · FL SWITCH 2412-2TC-2SFXPhoenix Contact · FL SWITCH 2414-2SFXPhoenix Contact · FL SWITCH 2414-2SFX PNPhoenix Contact · FL SWITCH 2416Phoenix Contact · FL SWITCH 2416 PNPhoenix Contact · FL SWITCH 2504-2GC-2SFPPhoenix Contact · FL SWITCH 2506-2SFPPhoenix Contact · FL SWITCH 2506-2SFP/K1Phoenix Contact · FL SWITCH 2506-2SFP PNPhoenix Contact · FL SWITCH 2508Phoenix Contact · FL SWITCH 2508/K1Phoenix Contact · FL SWITCH 2508 PNPhoenix Contact · FL SWITCH 2512-2GC-2SFPPhoenix Contact · FL SWITCH 2514-2SFPPhoenix Contact · FL SWITCH 2514-2SFP PNPhoenix Contact · FL SWITCH 2516Phoenix Contact · FL SWITCH 2516 PNPhoenix Contact · FL SWITCH 2608Phoenix Contact · FL SWITCH 2608 PNPhoenix Contact · FL SWITCH 2708Phoenix Contact · FL SWITCH 2708 PNWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →