CVE record · CVE-2025-41693

Authenticated Denial-of-Service via SSH

CVSS 4.3 MediumEPSS 0.0052 · 44th percentile

Published by the CVE Program (CNA: CERTVDE) at 9 Dec 2025, 08:13 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Phoenix Contact	FL SWITCH 2005	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2008	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2016	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2105	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2108	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2116	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2204-2TC-2SFX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2205	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206-2FX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206-2FX SM	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206-2FX SM ST	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206-2FX ST	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206-2SFX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206-2SFX PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2206C-2FX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2207-FX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2207-FX SM	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2208	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2208 PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2208C	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2212-2TC-2SFX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2214-2FX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2214-2FX SM	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2214-2SFX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2214-2SFX PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2216	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2216 PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2304-2GC-2SFP	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2306-2SFP	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2306-2SFP PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2308	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2308 PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2312-2GC-2SFP	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2314-2SFP	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2314-2SFP PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2316	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2316 PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2404-2TC-2SFX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2406-2SFX	affected 0.0.0 to before 3.50 semver Other versions: unaffected
Phoenix Contact	FL SWITCH 2406-2SFX PN	affected 0.0.0 to before 3.50 semver Other versions: unaffected

And 29 more products. The full list is on the CVE record.

Identifiers: CVE-2025-41693
CNA: CERTVDE
Weakness (CWE): CWE-770
Tags: Phoenix Contact FL SWITCH 2005
Phoenix Contact FL SWITCH 2008
Phoenix Contact FL SWITCH 2016
Phoenix Contact FL SWITCH 2105
Phoenix Contact FL SWITCH 2108
Phoenix Contact FL SWITCH 2116
Phoenix Contact FL SWITCH 2204-2TC-2SFX
Phoenix Contact FL SWITCH 2205
Denial of service
Published: 9 Dec 2025
Updated: 9 Dec 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
4.3	Medium	3.1	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	CNA (CERTVDE)

CISA KEV Not listed.
EPSS 0.0052, the 44th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 9 Dec 2025. New records show when each source confirmed them.

Sources

References from the CNA

certvde.com/de/advisories/VDE-2025-071

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.