CVE-2025-41694 Authenticated Denial-of-Service via Webshell
A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.
Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: Phoenix Contact
product: FL SWITCH 2005
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2008
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2016
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2105
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2108
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2116
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2204-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2205
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX SM
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX SM ST
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX ST
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206C-2FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2207-FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2207-FX SM
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2208
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2208 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2208C
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2212-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2FX SM
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2216
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2216 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2304-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2306-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2306-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2308
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2308 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2312-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2314-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2314-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2316
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2316 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2404-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2406-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2406-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2408
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2408 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2412-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2414-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2414-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2416
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2416 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2504-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2506-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2506-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2508
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2508 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2512-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2514-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2514-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2516
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2516 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2608
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2608 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2708
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2708 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2303-8SP1
default_status: unaffected
vendor: Phoenix Contact
product: FL NAT 2008
default_status: unaffected
vendor: Phoenix Contact
product: FL NAT 2208
default_status: unaffected
vendor: Phoenix Contact
product: FL NAT 2304-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2008F
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2316/K1
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2506-2SFP/K1
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2508/K1
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube
Published: 2025-12-09T08:12:59.166Z