CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:32.
Filters
1 actief1 advisories gevonden
VDE-2025-071
Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware
Gepubliceerd
9 december 2025
Laatste update
12 januari 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Multiple vulnerabilities have been identified in the FL SWITCH 2xxx firmware prior to version 3.50. Two of these (CVE-2025-41692 and CVE-2025-41696) enable an attacker to access the device's file system. Two other vulnerabilities (CVE-2025-41693 and CVE-2025-41694) are related to Denial of Service (DoS) attacks, which partly limit the device's functionality. Another vulnerability (CVE-2025-41697) allows an unauthenticated physical attacker to access a login shell via an undocumented UART port. Furthermore, there are multiple vulnerabilities relating to reflected cross-site scripting in the web-based management of the device. All vulnerabilities have been resolved in firmware version 3.50.
Mitigatiesamenvatting
Phoenix Contact strongly recommends to upgrade to firmware 3.50 which addresses this vulnerability and is available for download for all affected devices.
Revisiegeschiedenis (2)
Initiële publicatie — 9 december 2025
Initial release.
Update A — 12 januari 2026
Version range specifier and product idfentification helper added to firmware branch of product tree.