{ "document": { "acknowledgments": [ { "organization": "CERT@VDE", "summary": "coordination.", "urls": [ "https://certvde.com" ] }, { "names": [ "D. Blagojevic", "S. Dietz", "F. Koroknai", "T. Weber" ], "organization": "CyberDanube", "summary": "Reporting" } ], "aggregate_severity": { "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale", "text": "High" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-GB", "notes": [ { "category": "summary", "text": "Multiple vulnerabilities have been identified in the FL SWITCH 2xxx firmware prior to version 3.50. Two of these (CVE-2025-41692 and CVE-2025-41696) enable an attacker to access the device's file system. Two other vulnerabilities (CVE-2025-41693 and CVE-2025-41694) are related to Denial of Service (DoS) attacks, which partly limit the device's functionality. Another vulnerability (CVE-2025-41697) allows an unauthenticated physical attacker to access a login shell via an undocumented UART port. Furthermore, there are multiple vulnerabilities relating to reflected cross-site scripting in the web-based management of the device. All vulnerabilities have been resolved in firmware version 3.50.", "title": "Summary" }, { "category": "description", "text": "Availability, integrity, or confidentiality of the FL SWITCH 2xxx can be compromised by attacks using these vulnerabilities.", "title": "Impact" }, { "category": "description", "text": "Phoenix Contact recommends to update to the latest 3.50 Firmware Release which fixes these vulnerabilities.", "title": "Remediation" }, { "category": "general", "text": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our [application note](https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf).", "title": "General Recommendation" } ], "publisher": { "category": "vendor", "contact_details": "psirt@phoenixcontact.com", "name": "Phoenix Contact GmbH & Co. KG", "namespace": "https://phoenixcontact.com/psirt" }, "references": [ { "category": "external", "summary": "PCSA-2025-00012", "url": "https://phoenixcontact.com/psirt" }, { "category": "external", "summary": "Phoenix Contact advisory overview at CERT@VDE", "url": "https://certvde.com/de/advisories/vendor/phoenixcontact/" }, { "category": "external", "summary": "Phoenix Contact application note", "url": "https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf" }, { "category": "self", "summary": "VDE-2025-071: Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware - HTML", "url": "https://certvde.com/en/advisories/VDE-2025-071" }, { "category": "self", "summary": "VDE-2025-071: Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware - CSAF", "url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-071.json" } ], "source_lang": "en", "title": "Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware", "tracking": { "aliases": [ "VDE-2025-071", "PCSA-2025-00012" ], "current_release_date": "2026-01-12T08:00:00.000Z", "generator": { "date": "2026-01-08T15:13:18.406Z", "engine": { "name": "Secvisogram", "version": "2.5.41" } }, "id": "VDE-2025-071", "initial_release_date": "2025-12-09T08:00:00.000Z", "revision_history": [ { "date": "2025-12-09T08:00:00.000Z", "number": "1.0.0", "summary": "Initial release." }, { "date": "2026-01-12T08:00:00.000Z", "number": "2.0.0", "summary": "Version range specifier and product idfentification helper added to firmware branch of product tree." } ], "status": "final", "version": "2.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "FL SWITCH 2005", "product": { "name": "FL SWITCH 2005", "product_id": "CSAFPID-11001", "product_identification_helper": { "model_numbers": [ "2702323" ] } } }, { "category": "product_name", "name": "FL SWITCH 2008", "product": { "name": "FL SWITCH 2008", "product_id": "CSAFPID-11002", "product_identification_helper": { "model_numbers": [ "2702324" ] } } }, { "category": "product_name", "name": "FL SWITCH 2016", "product": { "name": "FL SWITCH 2016", "product_id": "CSAFPID-11003", "product_identification_helper": { "model_numbers": [ "2702903" ] } } }, { "category": "product_name", "name": "FL SWITCH 2105", "product": { "name": "FL SWITCH 2105", "product_id": "CSAFPID-11004", "product_identification_helper": { "model_numbers": [ "2702665" ] } } }, { "category": "product_name", "name": "FL SWITCH 2108", "product": { "name": "FL SWITCH 2108", "product_id": "CSAFPID-11005", "product_identification_helper": { "model_numbers": [ "2702666" ] } } }, { "category": "product_name", "name": "FL SWITCH 2116", "product": { "name": "FL SWITCH 2116", "product_id": "CSAFPID-11006", "product_identification_helper": { "model_numbers": [ "2702908" ] } } }, { "category": "product_name", "name": "FL SWITCH 2204-2TC-2SFX", "product": { "name": "FL SWITCH 2204-2TC-2SFX", "product_id": "CSAFPID-11007", "product_identification_helper": { "model_numbers": [ "2702334" ] } } }, { "category": "product_name", "name": "FL SWITCH 2205", "product": { "name": "FL SWITCH 2205", "product_id": "CSAFPID-11008", "product_identification_helper": { "model_numbers": [ "2702326" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206-2FX", "product": { "name": "FL SWITCH 2206-2FX", "product_id": "CSAFPID-11009", "product_identification_helper": { "model_numbers": [ "2702330" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206-2FX SM", "product": { "name": "FL SWITCH 2206-2FX SM", "product_id": "CSAFPID-11010", "product_identification_helper": { "model_numbers": [ "2702331" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206-2FX SM ST", "product": { "name": "FL SWITCH 2206-2FX SM ST", "product_id": "CSAFPID-11011", "product_identification_helper": { "model_numbers": [ "2702333" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206-2FX ST", "product": { "name": "FL SWITCH 2206-2FX ST", "product_id": "CSAFPID-11012", "product_identification_helper": { "model_numbers": [ "2702332" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206-2SFX", "product": { "name": "FL SWITCH 2206-2SFX", "product_id": "CSAFPID-11013", "product_identification_helper": { "model_numbers": [ "2702969" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206-2SFX PN", "product": { "name": "FL SWITCH 2206-2SFX PN", "product_id": "CSAFPID-11014", "product_identification_helper": { "model_numbers": [ "1044028" ] } } }, { "category": "product_name", "name": "FL SWITCH 2206C-2FX", "product": { "name": "FL SWITCH 2206C-2FX", "product_id": "CSAFPID-11015", "product_identification_helper": { "model_numbers": [ "1095628" ] } } }, { "category": "product_name", "name": "FL SWITCH 2207-FX", "product": { "name": "FL SWITCH 2207-FX", "product_id": "CSAFPID-11016", "product_identification_helper": { "model_numbers": [ "2702328" ] } } }, { "category": "product_name", "name": "FL SWITCH 2207-FX SM", "product": { "name": "FL SWITCH 2207-FX SM", "product_id": "CSAFPID-11017", "product_identification_helper": { "model_numbers": [ "2702329" ] } } }, { "category": "product_name", "name": "FL SWITCH 2208", "product": { "name": "FL SWITCH 2208", "product_id": "CSAFPID-11018", "product_identification_helper": { "model_numbers": [ "2702327" ] } } }, { "category": "product_name", "name": "FL SWITCH 2208 PN", "product": { "name": "FL SWITCH 2208 PN", "product_id": "CSAFPID-11019", "product_identification_helper": { "model_numbers": [ "1044024" ] } } }, { "category": "product_name", "name": "FL SWITCH 2208C", "product": { "name": "FL SWITCH 2208C", "product_id": "CSAFPID-11020", "product_identification_helper": { "model_numbers": [ "1095627" ] } } }, { "category": "product_name", "name": "FL SWITCH 2212-2TC-2SFX", "product": { "name": "FL SWITCH 2212-2TC-2SFX", "product_id": "CSAFPID-11021", "product_identification_helper": { "model_numbers": [ "2702907" ] } } }, { "category": "product_name", "name": "FL SWITCH 2214-2FX", "product": { "name": "FL SWITCH 2214-2FX", "product_id": "CSAFPID-11022", "product_identification_helper": { "model_numbers": [ "2702905" ] } } }, { "category": "product_name", "name": "FL SWITCH 2214-2FX SM", "product": { "name": "FL SWITCH 2214-2FX SM", "product_id": "CSAFPID-11023", "product_identification_helper": { "model_numbers": [ "2702906" ] } } }, { "category": "product_name", "name": "FL SWITCH 2214-2SFX", "product": { "name": "FL SWITCH 2214-2SFX", "product_id": "CSAFPID-11024", "product_identification_helper": { "model_numbers": [ "1006188" ] } } }, { "category": "product_name", "name": "FL SWITCH 2214-2SFX PN", "product": { "name": "FL SWITCH 2214-2SFX PN", "product_id": "CSAFPID-11025", "product_identification_helper": { "model_numbers": [ "1044030" ] } } }, { "category": "product_name", "name": "FL SWITCH 2216", "product": { "name": "FL SWITCH 2216", "product_id": "CSAFPID-11026", "product_identification_helper": { "model_numbers": [ "2702904" ] } } }, { "category": "product_name", "name": "FL SWITCH 2216 PN", "product": { "name": "FL SWITCH 2216 PN", "product_id": "CSAFPID-11027", "product_identification_helper": { "model_numbers": [ "1044029" ] } } }, { "category": "product_name", "name": "FL SWITCH 2304-2GC-2SFP", "product": { "name": "FL SWITCH 2304-2GC-2SFP", "product_id": "CSAFPID-11028", "product_identification_helper": { "model_numbers": [ "2702653" ] } } }, { "category": "product_name", "name": "FL SWITCH 2306-2SFP", "product": { "name": "FL SWITCH 2306-2SFP", "product_id": "CSAFPID-11029", "product_identification_helper": { "model_numbers": [ "2702970" ] } } }, { "category": "product_name", "name": "FL SWITCH 2306-2SFP PN", "product": { "name": "FL SWITCH 2306-2SFP PN", "product_id": "CSAFPID-11030", "product_identification_helper": { "model_numbers": [ "1009222" ] } } }, { "category": "product_name", "name": "FL SWITCH 2308", "product": { "name": "FL SWITCH 2308", "product_id": "CSAFPID-11031", "product_identification_helper": { "model_numbers": [ "2702652" ] } } }, { "category": "product_name", "name": "FL SWITCH 2308 PN", "product": { "name": "FL SWITCH 2308 PN", "product_id": "CSAFPID-11032", "product_identification_helper": { "model_numbers": [ "1009220" ] } } }, { "category": "product_name", "name": "FL SWITCH 2312-2GC-2SFP", "product": { "name": "FL SWITCH 2312-2GC-2SFP", "product_id": "CSAFPID-11033", "product_identification_helper": { "model_numbers": [ "2702910" ] } } }, { "category": "product_name", "name": "FL SWITCH 2314-2SFP", "product": { "name": "FL SWITCH 2314-2SFP", "product_id": "CSAFPID-11034", "product_identification_helper": { "model_numbers": [ "1006191" ] } } }, { "category": "product_name", "name": "FL SWITCH 2314-2SFP PN", "product": { "name": "FL SWITCH 2314-2SFP PN", "product_id": "CSAFPID-11035", "product_identification_helper": { "model_numbers": [ "1031683" ] } } }, { "category": "product_name", "name": "FL SWITCH 2316", "product": { "name": "FL SWITCH 2316", "product_id": "CSAFPID-11036", "product_identification_helper": { "model_numbers": [ "2702909" ] } } }, { "category": "product_name", "name": "FL SWITCH 2316 PN", "product": { "name": "FL SWITCH 2316 PN", "product_id": "CSAFPID-11037", "product_identification_helper": { "model_numbers": [ "1031673" ] } } }, { "category": "product_name", "name": "FL SWITCH 2404-2TC-2SFX", "product": { "name": "FL SWITCH 2404-2TC-2SFX", "product_id": "CSAFPID-11038", "product_identification_helper": { "model_numbers": [ "1088853" ] } } }, { "category": "product_name", "name": "FL SWITCH 2406-2SFX", "product": { "name": "FL SWITCH 2406-2SFX", "product_id": "CSAFPID-11039", "product_identification_helper": { "model_numbers": [ "1043414" ] } } }, { "category": "product_name", "name": "FL SWITCH 2406-2SFX PN", "product": { "name": "FL SWITCH 2406-2SFX PN", "product_id": "CSAFPID-11040", "product_identification_helper": { "model_numbers": [ "1089126" ] } } }, { "category": "product_name", "name": "FL SWITCH 2408", "product": { "name": "FL SWITCH 2408", "product_id": "CSAFPID-11041", "product_identification_helper": { "model_numbers": [ "1043412" ] } } }, { "category": "product_name", "name": "FL SWITCH 2408 PN", "product": { "name": "FL SWITCH 2408 PN", "product_id": "CSAFPID-11042", "product_identification_helper": { "model_numbers": [ "1089133" ] } } }, { "category": "product_name", "name": "FL SWITCH 2412-2TC-2SFX", "product": { "name": "FL SWITCH 2412-2TC-2SFX", "product_id": "CSAFPID-11043", "product_identification_helper": { "model_numbers": [ "1088875" ] } } }, { "category": "product_name", "name": "FL SWITCH 2414-2SFX", "product": { "name": "FL SWITCH 2414-2SFX", "product_id": "CSAFPID-11044", "product_identification_helper": { "model_numbers": [ "1043423" ] } } }, { "category": "product_name", "name": "FL SWITCH 2414-2SFX PN", "product": { "name": "FL SWITCH 2414-2SFX PN", "product_id": "CSAFPID-11045", "product_identification_helper": { "model_numbers": [ "1089139" ] } } }, { "category": "product_name", "name": "FL SWITCH 2416", "product": { "name": "FL SWITCH 2416", "product_id": "CSAFPID-11046", "product_identification_helper": { "model_numbers": [ "1043416" ] } } }, { "category": "product_name", "name": "FL SWITCH 2416 PN", "product": { "name": "FL SWITCH 2416 PN", "product_id": "CSAFPID-11047", "product_identification_helper": { "model_numbers": [ "1089150" ] } } }, { "category": "product_name", "name": "FL SWITCH 2504-2GC-2SFP", "product": { "name": "FL SWITCH 2504-2GC-2SFP", "product_id": "CSAFPID-11048", "product_identification_helper": { "model_numbers": [ "1088872" ] } } }, { "category": "product_name", "name": "FL SWITCH 2506-2SFP", "product": { "name": "FL SWITCH 2506-2SFP", "product_id": "CSAFPID-11049", "product_identification_helper": { "model_numbers": [ "1043491" ] } } }, { "category": "product_name", "name": "FL SWITCH 2506-2SFP PN", "product": { "name": "FL SWITCH 2506-2SFP PN", "product_id": "CSAFPID-11050", "product_identification_helper": { "model_numbers": [ "1089135" ] } } }, { "category": "product_name", "name": "FL SWITCH 2508", "product": { "name": "FL SWITCH 2508", "product_id": "CSAFPID-11051", "product_identification_helper": { "model_numbers": [ "1043484" ] } } }, { "category": "product_name", "name": "FL SWITCH 2508 PN", "product": { "name": "FL SWITCH 2508 PN", "product_id": "CSAFPID-11052", "product_identification_helper": { "model_numbers": [ "1089134" ] } } }, { "category": "product_name", "name": "FL SWITCH 2512-2GC-2SFP", "product": { "name": "FL SWITCH 2512-2GC-2SFP", "product_id": "CSAFPID-11053", "product_identification_helper": { "model_numbers": [ "1088856" ] } } }, { "category": "product_name", "name": "FL SWITCH 2514-2SFP", "product": { "name": "FL SWITCH 2514-2SFP", "product_id": "CSAFPID-11054", "product_identification_helper": { "model_numbers": [ "1043499" ] } } }, { "category": "product_name", "name": "FL SWITCH 2514-2SFP PN", "product": { "name": "FL SWITCH 2514-2SFP PN", "product_id": "CSAFPID-11055", "product_identification_helper": { "model_numbers": [ "1089154" ] } } }, { "category": "product_name", "name": "FL SWITCH 2516", "product": { "name": "FL SWITCH 2516", "product_id": "CSAFPID-11056", "product_identification_helper": { "model_numbers": [ "1043496" ] } } }, { "category": "product_name", "name": "FL SWITCH 2516 PN", "product": { "name": "FL SWITCH 2516 PN", "product_id": "CSAFPID-11057", "product_identification_helper": { "model_numbers": [ "1089205" ] } } }, { "category": "product_name", "name": "FL SWITCH 2608", "product": { "name": "FL SWITCH 2608", "product_id": "CSAFPID-11058", "product_identification_helper": { "model_numbers": [ "1106500" ] } } }, { "category": "product_name", "name": "FL SWITCH 2608 PN", "product": { "name": "FL SWITCH 2608 PN", "product_id": "CSAFPID-11059", "product_identification_helper": { "model_numbers": [ "1106616" ] } } }, { "category": "product_name", "name": "FL SWITCH 2708", "product": { "name": "FL SWITCH 2708", "product_id": "CSAFPID-11060", "product_identification_helper": { "model_numbers": [ "1106615" ] } } }, { "category": "product_name", "name": "FL SWITCH 2708 PN", "product": { "name": "FL SWITCH 2708 PN", "product_id": "CSAFPID-11061", "product_identification_helper": { "model_numbers": [ "1106610" ] } } }, { "category": "product_name", "name": "FL SWITCH 2303-8SP1", "product": { "name": "FL SWITCH 2303-8SP1", "product_id": "CSAFPID-11062", "product_identification_helper": { "model_numbers": [ "1278397" ] } } }, { "category": "product_name", "name": "FL NAT 2008", "product": { "name": "FL NAT 2008", "product_id": "CSAFPID-11064", "product_identification_helper": { "model_numbers": [ "2702881" ] } } }, { "category": "product_name", "name": "FL NAT 2208", "product": { "name": "FL NAT 2208", "product_id": "CSAFPID-11065", "product_identification_helper": { "model_numbers": [ "2702882" ] } } }, { "category": "product_name", "name": "FL NAT 2304-2GC-2SFP", "product": { "name": "FL NAT 2304-2GC-2SFP", "product_id": "CSAFPID-11066", "product_identification_helper": { "model_numbers": [ "2702981" ] } } }, { "category": "product_name", "name": "FL SWITCH 2008F", "product": { "name": "FL SWITCH 2008F", "product_id": "CSAFPID-11067", "product_identification_helper": { "model_numbers": [ "1106707" ] } } }, { "category": "product_name", "name": "FL SWITCH 2316/K1", "product": { "name": "FL SWITCH 2316/K1", "product_id": "CSAFPID-11068", "product_identification_helper": { "model_numbers": [ "1184084" ] } } }, { "category": "product_name", "name": "FL SWITCH 2506-2SFP/K1", "product": { "name": "FL SWITCH 2506-2SFP/K1", "product_id": "CSAFPID-11069", "product_identification_helper": { "model_numbers": [ "1215329" ] } } }, { "category": "product_name", "name": "FL SWITCH 2508/K1", "product": { "name": "FL SWITCH 2508/K1", "product_id": "CSAFPID-11070", "product_identification_helper": { "model_numbers": [ "1215350" ] } } } ], "category": "product_family", "name": "Hardware" }, { "branches": [ { "category": "product_version_range", "name": "vers:generic/<3.50", "product": { "name": "Firmware <3.50", "product_id": "CSAFPID-21001", "product_identification_helper": { "model_numbers": [ "1006188", "1006191", "1009220", "1009222", "1031673", "1031683", "1043412", "1043414", "1043416", "1043423", "1043484", "1043491", "1043496", "1043499", "1044024", "1044028", "1044029", "1044030", "1088853", "1088856", "1088872", "1088875", "1089126", "1089133", "1089134", "1089135", "1089139", "1089150", "1089154", "1089205", "1095627", "1095628", "1106500", "1106610", "1106615", "1106616", "1106707", "1184084", "1215329", "1215350", "1278397", "2702323", "2702324", "2702326", "2702327", "2702328", "2702329", "2702330", "2702331", "2702332", "2702333", "2702334", "2702652", "2702653", "2702665", "2702666", "2702881", "2702882", "2702903", "2702904", "2702905", "2702906", "2702907", "2702908", "2702909", "2702910", "2702969", "2702970", "2702981" ] } } }, { "category": "product_version", "name": "3.50", "product": { "name": "Firmware 3.50", "product_id": "CSAFPID-22001", "product_identification_helper": { "model_numbers": [ "1006188", "1006191", "1009220", "1009222", "1031673", "1031683", "1043412", "1043414", "1043416", "1043423", "1043484", "1043491", "1043496", "1043499", "1044024", "1044028", "1044029", "1044030", "1088853", "1088856", "1088872", "1088875", "1089126", "1089133", "1089134", "1089135", "1089139", "1089150", "1089154", "1089205", "1095627", "1095628", "1106500", "1106610", "1106615", "1106616", "1106707", "1184084", "1215329", "1215350", "1278397", "2702323", "2702324", "2702326", "2702327", "2702328", "2702329", "2702330", "2702331", "2702332", "2702333", "2702334", "2702652", "2702653", "2702665", "2702666", "2702881", "2702882", "2702903", "2702904", "2702905", "2702906", "2702907", "2702908", "2702909", "2702910", "2702969", "2702970", "2702981" ] } } } ], "category": "product_family", "name": "Firmware" } ], "category": "vendor", "name": "Phoenix Contact GmbH & Co. KG" } ], "product_groups": [ { "group_id": "CSAFGID-0001", "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ], "summary": "Affected Products." }, { "group_id": "CSAFGID-0002", "product_ids": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "summary": "Fixed Product." } ], "relationships": [ { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2005", "product_id": "CSAFPID-31001", "product_identification_helper": { "model_numbers": [ "2702323" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11001" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2005", "product_id": "CSAFPID-32001", "product_identification_helper": { "model_numbers": [ "2702323" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11001" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2008", "product_id": "CSAFPID-31002", "product_identification_helper": { "model_numbers": [ "2702324" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11002" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2008", "product_id": "CSAFPID-32002", "product_identification_helper": { "model_numbers": [ "2702324" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11002" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2016", "product_id": "CSAFPID-31003", "product_identification_helper": { "model_numbers": [ "2702903" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11003" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2016", "product_id": "CSAFPID-32003", "product_identification_helper": { "model_numbers": [ "2702903" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11003" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2105", "product_id": "CSAFPID-31004", "product_identification_helper": { "model_numbers": [ "2702665" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11004" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2105", "product_id": "CSAFPID-32004", "product_identification_helper": { "model_numbers": [ "2702665" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11004" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2108", "product_id": "CSAFPID-31005", "product_identification_helper": { "model_numbers": [ "2702666" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11005" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2108", "product_id": "CSAFPID-32005", "product_identification_helper": { "model_numbers": [ "2702666" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11005" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2116", "product_id": "CSAFPID-31006", "product_identification_helper": { "model_numbers": [ "2702908" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11006" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2116", "product_id": "CSAFPID-32006", "product_identification_helper": { "model_numbers": [ "2702908" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11006" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2204-2TC-2SFX", "product_id": "CSAFPID-31007", "product_identification_helper": { "model_numbers": [ "2702334" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11007" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2204-2TC-2SFX", "product_id": "CSAFPID-32007", "product_identification_helper": { "model_numbers": [ "2702334" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11007" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2205", "product_id": "CSAFPID-31008", "product_identification_helper": { "model_numbers": [ "2702326" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11008" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2205", "product_id": "CSAFPID-32008", "product_identification_helper": { "model_numbers": [ "2702326" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11008" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206-2FX", "product_id": "CSAFPID-31009", "product_identification_helper": { "model_numbers": [ "2702330" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11009" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206-2FX", "product_id": "CSAFPID-32009", "product_identification_helper": { "model_numbers": [ "2702330" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11009" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206-2FX SM", "product_id": "CSAFPID-31010", "product_identification_helper": { "model_numbers": [ "2702331" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11010" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206-2FX SM", "product_id": "CSAFPID-32010", "product_identification_helper": { "model_numbers": [ "2702331" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11010" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206-2FX SM ST", "product_id": "CSAFPID-31011", "product_identification_helper": { "model_numbers": [ "2702333" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11011" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206-2FX SM ST", "product_id": "CSAFPID-32011", "product_identification_helper": { "model_numbers": [ "2702333" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11011" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206-2FX ST", "product_id": "CSAFPID-31012", "product_identification_helper": { "model_numbers": [ "2702332" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11012" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206-2FX ST", "product_id": "CSAFPID-32012", "product_identification_helper": { "model_numbers": [ "2702332" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11012" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206-2SFX", "product_id": "CSAFPID-31013", "product_identification_helper": { "model_numbers": [ "2702969" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11013" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206-2SFX", "product_id": "CSAFPID-32013", "product_identification_helper": { "model_numbers": [ "2702969" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11013" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206-2SFX PN", "product_id": "CSAFPID-31014", "product_identification_helper": { "model_numbers": [ "1044028" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11014" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206-2SFX PN", "product_id": "CSAFPID-32014", "product_identification_helper": { "model_numbers": [ "1044028" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11014" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2206C-2FX", "product_id": "CSAFPID-31015", "product_identification_helper": { "model_numbers": [ "1095628" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11015" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2206C-2FX", "product_id": "CSAFPID-32015", "product_identification_helper": { "model_numbers": [ "1095628" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11015" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2207-FX", "product_id": "CSAFPID-31016", "product_identification_helper": { "model_numbers": [ "2702328" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11016" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2207-FX", "product_id": "CSAFPID-32016", "product_identification_helper": { "model_numbers": [ "2702328" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11016" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2207-FX SM", "product_id": "CSAFPID-31017", "product_identification_helper": { "model_numbers": [ "2702329" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11017" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2207-FX SM", "product_id": "CSAFPID-32017", "product_identification_helper": { "model_numbers": [ "2702329" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11017" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2208", "product_id": "CSAFPID-31018", "product_identification_helper": { "model_numbers": [ "2702327" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11018" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2208", "product_id": "CSAFPID-32018", "product_identification_helper": { "model_numbers": [ "2702327" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11018" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2208 PN", "product_id": "CSAFPID-31019", "product_identification_helper": { "model_numbers": [ "1044024" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11019" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2208 PN", "product_id": "CSAFPID-32019", "product_identification_helper": { "model_numbers": [ "1044024" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11019" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2208C", "product_id": "CSAFPID-31020", "product_identification_helper": { "model_numbers": [ "1095627" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11020" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2208C", "product_id": "CSAFPID-32020", "product_identification_helper": { "model_numbers": [ "1095627" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11020" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2212-2TC-2SFX", "product_id": "CSAFPID-31021", "product_identification_helper": { "model_numbers": [ "2702907" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11021" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2212-2TC-2SFX", "product_id": "CSAFPID-32021", "product_identification_helper": { "model_numbers": [ "2702907" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11021" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2214-2FX", "product_id": "CSAFPID-31022", "product_identification_helper": { "model_numbers": [ "2702905" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11022" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2214-2FX", "product_id": "CSAFPID-32022", "product_identification_helper": { "model_numbers": [ "2702905" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11022" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2214-2FX SM", "product_id": "CSAFPID-31023", "product_identification_helper": { "model_numbers": [ "2702906" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11023" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2214-2FX SM", "product_id": "CSAFPID-32023", "product_identification_helper": { "model_numbers": [ "2702906" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11023" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2214-2SFX", "product_id": "CSAFPID-31024", "product_identification_helper": { "model_numbers": [ "1006188" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11024" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2214-2SFX", "product_id": "CSAFPID-32024", "product_identification_helper": { "model_numbers": [ "1006188" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11024" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2214-2SFX PN", "product_id": "CSAFPID-31025", "product_identification_helper": { "model_numbers": [ "1044030" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11025" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2214-2SFX PN", "product_id": "CSAFPID-32025", "product_identification_helper": { "model_numbers": [ "1044030" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11025" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2216", "product_id": "CSAFPID-31026", "product_identification_helper": { "model_numbers": [ "2702904" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11026" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2216", "product_id": "CSAFPID-32026", "product_identification_helper": { "model_numbers": [ "2702904" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11026" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2216 PN", "product_id": "CSAFPID-31027", "product_identification_helper": { "model_numbers": [ "1044029" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11027" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2216 PN", "product_id": "CSAFPID-32027", "product_identification_helper": { "model_numbers": [ "1044029" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11027" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2304-2GC-2SFP", "product_id": "CSAFPID-31028", "product_identification_helper": { "model_numbers": [ "2702653" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11028" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2304-2GC-2SFP", "product_id": "CSAFPID-32028", "product_identification_helper": { "model_numbers": [ "2702653" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11028" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2306-2SFP", "product_id": "CSAFPID-31029", "product_identification_helper": { "model_numbers": [ "2702970" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11029" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2306-2SFP", "product_id": "CSAFPID-32029", "product_identification_helper": { "model_numbers": [ "2702970" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11029" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2306-2SFP PN", "product_id": "CSAFPID-31030", "product_identification_helper": { "model_numbers": [ "1009222" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11030" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2306-2SFP PN", "product_id": "CSAFPID-32030", "product_identification_helper": { "model_numbers": [ "1009222" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11030" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2308", "product_id": "CSAFPID-31031", "product_identification_helper": { "model_numbers": [ "2702652" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11031" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2308", "product_id": "CSAFPID-32031", "product_identification_helper": { "model_numbers": [ "2702652" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11031" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2308 PN", "product_id": "CSAFPID-31032", "product_identification_helper": { "model_numbers": [ "1009220" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11032" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2308 PN", "product_id": "CSAFPID-32032", "product_identification_helper": { "model_numbers": [ "1009220" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11032" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2312-2GC-2SFP", "product_id": "CSAFPID-31033", "product_identification_helper": { "model_numbers": [ "2702910" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11033" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2312-2GC-2SFP", "product_id": "CSAFPID-32033", "product_identification_helper": { "model_numbers": [ "2702910" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11033" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2314-2SFP", "product_id": "CSAFPID-31034", "product_identification_helper": { "model_numbers": [ "1006191" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11034" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2314-2SFP", "product_id": "CSAFPID-32034", "product_identification_helper": { "model_numbers": [ "1006191" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11034" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2314-2SFP PN", "product_id": "CSAFPID-31035", "product_identification_helper": { "model_numbers": [ "1031683" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11035" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2314-2SFP PN", "product_id": "CSAFPID-32035", "product_identification_helper": { "model_numbers": [ "1031683" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11035" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2316", "product_id": "CSAFPID-31036", "product_identification_helper": { "model_numbers": [ "2702909" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11036" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2316", "product_id": "CSAFPID-32036", "product_identification_helper": { "model_numbers": [ "2702909" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11036" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2316 PN", "product_id": "CSAFPID-31037", "product_identification_helper": { "model_numbers": [ "1031673" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11037" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2316 PN", "product_id": "CSAFPID-32037", "product_identification_helper": { "model_numbers": [ "1031673" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11037" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2404-2TC-2SFX", "product_id": "CSAFPID-31038", "product_identification_helper": { "model_numbers": [ "1088853" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11038" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2404-2TC-2SFX", "product_id": "CSAFPID-32038", "product_identification_helper": { "model_numbers": [ "1088853" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11038" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2406-2SFX", "product_id": "CSAFPID-31039", "product_identification_helper": { "model_numbers": [ "1043414" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11039" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2406-2SFX", "product_id": "CSAFPID-32039", "product_identification_helper": { "model_numbers": [ "1043414" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11039" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2406-2SFX PN", "product_id": "CSAFPID-31040", "product_identification_helper": { "model_numbers": [ "1089126" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11040" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2406-2SFX PN", "product_id": "CSAFPID-32040", "product_identification_helper": { "model_numbers": [ "1089126" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11040" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2408", "product_id": "CSAFPID-31041", "product_identification_helper": { "model_numbers": [ "1043412" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11041" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2408", "product_id": "CSAFPID-32041", "product_identification_helper": { "model_numbers": [ "1043412" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11041" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2408 PN", "product_id": "CSAFPID-31042", "product_identification_helper": { "model_numbers": [ "1089133" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11042" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2408 PN", "product_id": "CSAFPID-32042", "product_identification_helper": { "model_numbers": [ "1089133" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11042" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2412-2TC-2SFX", "product_id": "CSAFPID-31043", "product_identification_helper": { "model_numbers": [ "1088875" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11043" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2412-2TC-2SFX", "product_id": "CSAFPID-32043", "product_identification_helper": { "model_numbers": [ "1088875" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11043" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2414-2SFX", "product_id": "CSAFPID-31044", "product_identification_helper": { "model_numbers": [ "1043423" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11044" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2414-2SFX", "product_id": "CSAFPID-32044", "product_identification_helper": { "model_numbers": [ "1043423" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11044" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2414-2SFX PN", "product_id": "CSAFPID-31045", "product_identification_helper": { "model_numbers": [ "1089139" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11045" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2414-2SFX PN", "product_id": "CSAFPID-32045", "product_identification_helper": { "model_numbers": [ "1089139" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11045" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2416", "product_id": "CSAFPID-31046", "product_identification_helper": { "model_numbers": [ "1043416" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11046" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2416", "product_id": "CSAFPID-32046", "product_identification_helper": { "model_numbers": [ "1043416" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11046" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2416 PN", "product_id": "CSAFPID-31047", "product_identification_helper": { "model_numbers": [ "1089150" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11047" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2416 PN", "product_id": "CSAFPID-32047", "product_identification_helper": { "model_numbers": [ "1089150" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11047" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2504-2GC-2SFP", "product_id": "CSAFPID-31048", "product_identification_helper": { "model_numbers": [ "1088872" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11048" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2504-2GC-2SFP", "product_id": "CSAFPID-32048", "product_identification_helper": { "model_numbers": [ "1088872" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11048" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2506-2SFP", "product_id": "CSAFPID-31049", "product_identification_helper": { "model_numbers": [ "1043491" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11049" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2506-2SFP", "product_id": "CSAFPID-32049", "product_identification_helper": { "model_numbers": [ "1043491" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11049" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2506-2SFP PN", "product_id": "CSAFPID-31050", "product_identification_helper": { "model_numbers": [ "1089135" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11050" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2506-2SFP PN", "product_id": "CSAFPID-32050", "product_identification_helper": { "model_numbers": [ "1089135" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11050" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2508", "product_id": "CSAFPID-31051", "product_identification_helper": { "model_numbers": [ "1043484" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11051" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2508", "product_id": "CSAFPID-32051", "product_identification_helper": { "model_numbers": [ "1043484" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11051" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2508 PN", "product_id": "CSAFPID-31052", "product_identification_helper": { "model_numbers": [ "1089134" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11052" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2508 PN", "product_id": "CSAFPID-32052", "product_identification_helper": { "model_numbers": [ "1089134" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11052" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2512-2GC-2SFP", "product_id": "CSAFPID-31053", "product_identification_helper": { "model_numbers": [ "1088856" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11053" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2512-2GC-2SFP", "product_id": "CSAFPID-32053", "product_identification_helper": { "model_numbers": [ "1088856" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11053" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2514-2SFP", "product_id": "CSAFPID-31054", "product_identification_helper": { "model_numbers": [ "1043499" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11054" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2514-2SFP", "product_id": "CSAFPID-32054", "product_identification_helper": { "model_numbers": [ "1043499" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11054" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2514-2SFP PN", "product_id": "CSAFPID-31055", "product_identification_helper": { "model_numbers": [ "1089154" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11055" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2514-2SFP PN", "product_id": "CSAFPID-32055", "product_identification_helper": { "model_numbers": [ "1089154" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11055" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2516", "product_id": "CSAFPID-31056", "product_identification_helper": { "model_numbers": [ "1043496" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11056" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2516", "product_id": "CSAFPID-32056", "product_identification_helper": { "model_numbers": [ "1043496" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11056" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2516 PN", "product_id": "CSAFPID-31057", "product_identification_helper": { "model_numbers": [ "1089205" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11057" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2516 PN", "product_id": "CSAFPID-32057", "product_identification_helper": { "model_numbers": [ "1089205" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11057" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2608", "product_id": "CSAFPID-31058", "product_identification_helper": { "model_numbers": [ "1106500" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11058" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2608", "product_id": "CSAFPID-32058", "product_identification_helper": { "model_numbers": [ "1106500" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11058" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2608 PN", "product_id": "CSAFPID-31059", "product_identification_helper": { "model_numbers": [ "1106616" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11059" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2608 PN", "product_id": "CSAFPID-32059", "product_identification_helper": { "model_numbers": [ "1106616" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11059" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2708", "product_id": "CSAFPID-31060", "product_identification_helper": { "model_numbers": [ "1106615" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11060" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2708", "product_id": "CSAFPID-32060", "product_identification_helper": { "model_numbers": [ "1106615" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11060" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2708 PN", "product_id": "CSAFPID-31061", "product_identification_helper": { "model_numbers": [ "1106610" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11061" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2708 PN", "product_id": "CSAFPID-32061", "product_identification_helper": { "model_numbers": [ "1106610" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11061" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2303-8SP1", "product_id": "CSAFPID-31062", "product_identification_helper": { "model_numbers": [ "1278397" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11062" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2303-8SP1", "product_id": "CSAFPID-32062", "product_identification_helper": { "model_numbers": [ "1278397" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11062" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL NAT 2008", "product_id": "CSAFPID-31064", "product_identification_helper": { "model_numbers": [ "2702881" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11064" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL NAT 2008", "product_id": "CSAFPID-32064", "product_identification_helper": { "model_numbers": [ "2702881" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11064" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL NAT 2208", "product_id": "CSAFPID-31065", "product_identification_helper": { "model_numbers": [ "2702882" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11065" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL NAT 2208", "product_id": "CSAFPID-32065", "product_identification_helper": { "model_numbers": [ "2702882" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11065" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL NAT 2304-2GC-2SFP", "product_id": "CSAFPID-31066", "product_identification_helper": { "model_numbers": [ "2702981" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11066" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL NAT 2304-2GC-2SFP", "product_id": "CSAFPID-32066", "product_identification_helper": { "model_numbers": [ "2702981" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11066" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2008F", "product_id": "CSAFPID-31067", "product_identification_helper": { "model_numbers": [ "1106707" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11067" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2008F", "product_id": "CSAFPID-32067", "product_identification_helper": { "model_numbers": [ "1106707" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11067" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2316/K1", "product_id": "CSAFPID-31068", "product_identification_helper": { "model_numbers": [ "1184084" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11068" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2316/K1", "product_id": "CSAFPID-32068", "product_identification_helper": { "model_numbers": [ "1184084" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11068" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2506-2SFP/K1", "product_id": "CSAFPID-31069", "product_identification_helper": { "model_numbers": [ "1215329" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11069" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2506-2SFP/K1", "product_id": "CSAFPID-32069", "product_identification_helper": { "model_numbers": [ "1215329" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11069" }, { "category": "installed_on", "full_product_name": { "name": "Firmware <3.50 installed on FL SWITCH 2508/K1", "product_id": "CSAFPID-31070", "product_identification_helper": { "model_numbers": [ "1215350" ] } }, "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11070" }, { "category": "installed_on", "full_product_name": { "name": "Firmware 3.50 installed on FL SWITCH 2508/K1", "product_id": "CSAFPID-32070", "product_identification_helper": { "model_numbers": [ "1215350" ] } }, "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11070" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-41692", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "notes": [ { "category": "description", "text": "A high privileged remote attacker with admin privileges for the webUI can brute-force the \"root\" and \"user\" passwords of the underlying OS due to a weak password generation algorithm.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "environmentalScore": 6.8, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "temporalScore": 6.8, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Weak/Predictable root Password" }, { "cve": "CVE-2025-41693", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 4.3, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "temporalScore": 4.3, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Authenticated Denial-of-Service via SSH" }, { "cve": "CVE-2025-41694", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 6.5, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "temporalScore": 6.5, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Authenticated Denial-of-Service via Webshell" }, { "cve": "CVE-2025-41695", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in dyn_conn.php" }, { "cve": "CVE-2025-41745", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_portCntr2.php" }, { "cve": "CVE-2025-41746", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_portSecCfg.php" }, { "cve": "CVE-2025-41747", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_vlanIntfCfg.php" }, { "cve": "CVE-2025-41748", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_Dot1xCfg.php" }, { "cve": "CVE-2025-41749", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in port_util.php" }, { "cve": "CVE-2025-41750", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_PortCfg.php" }, { "cve": "CVE-2025-41751", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_portCntr.php" }, { "cve": "CVE-2025-41752", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "A XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Reflected XSS vulnerability in pxc_portSfp.php" }, { "cve": "CVE-2025-41696", "cwe": { "id": "CWE-798", "name": "Use of Hard-coded Credentials" }, "notes": [ { "category": "description", "text": "An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "environmentalScore": 4.6, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 4.6, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Hardcoded User Password" }, { "cve": "CVE-2025-41697", "cwe": { "id": "CWE-1299", "name": "Missing Protection Mechanism for Alternate Hardware Interface" }, "notes": [ { "category": "description", "text": "An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.", "title": "CVE Description" } ], "product_status": { "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010", "CSAFPID-32011", "CSAFPID-32012", "CSAFPID-32013", "CSAFPID-32014", "CSAFPID-32015", "CSAFPID-32016", "CSAFPID-32017", "CSAFPID-32018", "CSAFPID-32019", "CSAFPID-32020", "CSAFPID-32021", "CSAFPID-32022", "CSAFPID-32023", "CSAFPID-32024", "CSAFPID-32025", "CSAFPID-32026", "CSAFPID-32027", "CSAFPID-32028", "CSAFPID-32029", "CSAFPID-32030", "CSAFPID-32031", "CSAFPID-32032", "CSAFPID-32033", "CSAFPID-32034", "CSAFPID-32035", "CSAFPID-32036", "CSAFPID-32037", "CSAFPID-32038", "CSAFPID-32039", "CSAFPID-32040", "CSAFPID-32041", "CSAFPID-32042", "CSAFPID-32043", "CSAFPID-32044", "CSAFPID-32045", "CSAFPID-32046", "CSAFPID-32047", "CSAFPID-32048", "CSAFPID-32049", "CSAFPID-32050", "CSAFPID-32051", "CSAFPID-32052", "CSAFPID-32053", "CSAFPID-32054", "CSAFPID-32055", "CSAFPID-32056", "CSAFPID-32057", "CSAFPID-32058", "CSAFPID-32059", "CSAFPID-32060", "CSAFPID-32061", "CSAFPID-32062", "CSAFPID-32064", "CSAFPID-32065", "CSAFPID-32066", "CSAFPID-32067", "CSAFPID-32068", "CSAFPID-32069", "CSAFPID-32070" ], "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] }, "remediations": [ { "category": "vendor_fix", "date": "2025-12-09T10:00:00.000Z", "details": "Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.", "group_ids": [ "CSAFGID-0001" ], "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "environmentalScore": 6.8, "environmentalSeverity": "MEDIUM", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 6.8, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018", "CSAFPID-31019", "CSAFPID-31020", "CSAFPID-31021", "CSAFPID-31022", "CSAFPID-31023", "CSAFPID-31024", "CSAFPID-31025", "CSAFPID-31026", "CSAFPID-31027", "CSAFPID-31028", "CSAFPID-31029", "CSAFPID-31030", "CSAFPID-31031", "CSAFPID-31032", "CSAFPID-31033", "CSAFPID-31034", "CSAFPID-31035", "CSAFPID-31036", "CSAFPID-31037", "CSAFPID-31038", "CSAFPID-31039", "CSAFPID-31040", "CSAFPID-31041", "CSAFPID-31042", "CSAFPID-31043", "CSAFPID-31044", "CSAFPID-31045", "CSAFPID-31046", "CSAFPID-31047", "CSAFPID-31048", "CSAFPID-31049", "CSAFPID-31050", "CSAFPID-31051", "CSAFPID-31052", "CSAFPID-31053", "CSAFPID-31054", "CSAFPID-31055", "CSAFPID-31056", "CSAFPID-31057", "CSAFPID-31058", "CSAFPID-31059", "CSAFPID-31060", "CSAFPID-31061", "CSAFPID-31062", "CSAFPID-31064", "CSAFPID-31065", "CSAFPID-31066", "CSAFPID-31067", "CSAFPID-31068", "CSAFPID-31069", "CSAFPID-31070" ] } ], "title": "Shell access to UART Console" } ] }