Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: Phoenix Contact FL NAT 2008, FL NAT 2208 and 67 more products 3.50 Clear all filters
TI-2025-27656 CVE-2025-41693 · GHSA-q7f9-7f36-x3ch

Authenticated Denial-of-Service via SSH

Priority LOW 21

A low privileged remote attacker can use the ssh feature to execute commands directly after login.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00515 Published 2025-12-09 Fixed in 3.50 CWE-770
TI-2025-27659 CVE-2025-41696 · GHSA-chp3-94cp-3c98

Hardcoded User Password

Priority LOW 21

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0021 Published 2025-12-09 Fixed in 3.50 CWE-798
TI-2025-27657 CVE-2025-41694 · GHSA-56w8-9x5w-fmh9

Authenticated Denial-of-Service via Webshell

Priority LOW 29

A low privileged remote attacker can run the webshell with an empty command containing whitespace.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00482 Published 2025-12-09 Fixed in 3.50 CWE-770
TI-2025-27655 CVE-2025-41692 · GHSA-5q5j-x9p3-cg4x

Weak/Predictable root Password

Priority LOW 30

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00297 Published 2025-12-09 Fixed in 3.50 CWE-916
TI-2025-27660 CVE-2025-41697 · GHSA-ccrq-w269-c7pj

Shell access to UART Console

Priority LOW 32

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2025-12-09 Fixed in 3.50 CWE-1299
TI-2025-27658 CVE-2025-41695 · GHSA-7g4x-mrgc-5qpr

Reflected XSS vulnerability in dyn_conn.php

Priority LOW 32

An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0066 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27705 CVE-2025-41745 · GHSA-6pxr-h2j5-29fw

Reflected XSS vulnerability in pxc_portCntr2.php

Priority LOW 32

An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00653 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27706 CVE-2025-41746 · GHSA-jv5f-c6j9-f5gh

Reflected XSS vulnerability in pxc_portSecCfg.php

Priority MEDIUM 43

An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.09765 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27707 CVE-2025-41747 · GHSA-35pj-p27v-5rpc

Reflected XSS vulnerability in pxc_vlanIntfCfg.php

Priority MEDIUM 43

An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via we…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.09765 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27708 CVE-2025-41748 · GHSA-rx4c-7v62-8378

Reflected XSS vulnerability in pxc_Dot1xCfg.php

Priority MEDIUM 43

An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web base…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.09765 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27709 CVE-2025-41749 · GHSA-q92c-5g4r-65xg

Reflected XSS vulnerability in port_util.php

Priority LOW 32

An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based m…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00653 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27710 CVE-2025-41750 · GHSA-xcx6-h2fv-4pc2

Reflected XSS vulnerability in pxc_PortCfg.php

Priority MEDIUM 43

An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.09765 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27711 CVE-2025-41751 · GHSA-p3g5-4g22-76mw

Reflected XSS vulnerability in pxc_portCntr.php

Priority MEDIUM 43

An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web base…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.09765 Published 2025-12-09 Fixed in 3.50 CWE-79
TI-2025-27712 CVE-2025-41752 · GHSA-5592-rmfh-c6gv

Reflected XSS vulnerability in pxc_portSfp.php

Priority MEDIUM 43

An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.09765 Published 2025-12-09 Fixed in 3.50 CWE-79