# Phoenix Contact FL SWITCH 2205.

Every CVE that names Phoenix Contact FL SWITCH 2205 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cross‑Site Request Forgery in Link Aggregation Configuration](https://agentprime.io/advisories/CVE-2026-22323.md)
  `CVE-2026-22323` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Stored Cross‑Site Scripting in Link Aggregation Name Handling](https://agentprime.io/advisories/CVE-2026-22322.md)
  `CVE-2026-22322` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Stack-Based Buffer Overflow in CLI Login Username Handling over CLI](https://agentprime.io/advisories/CVE-2026-22321.md)
  `CVE-2026-22321` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption
- [Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI](https://agentprime.io/advisories/CVE-2026-22320.md)
  `CVE-2026-22320` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption
- [Stack-Based Buffer Overflow in File Install Parameter Handling](https://agentprime.io/advisories/CVE-2026-22319.md)
  `CVE-2026-22319` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption
- [Stack-Based Buffer Overflow in File Transfer Parameter Handling](https://agentprime.io/advisories/CVE-2026-22318.md)
  `CVE-2026-22318` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption
- [Command Injection Vulnerability in Root CA Certificate Transfer Workflow](https://agentprime.io/advisories/CVE-2026-22317.md)
  `CVE-2026-22317` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.2 High · Not analysed yet · Published 18 Mar 2026 · Tags: Command injection
- [Buffer Overflow using TFTP Filename](https://agentprime.io/advisories/CVE-2026-22316.md)
  `CVE-2026-22316` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption
- [Authenticated Denial-of-Service via SSH](https://agentprime.io/advisories/CVE-2025-41693.md)
  `CVE-2025-41693` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Denial of service
- [Hardcoded User Password](https://agentprime.io/advisories/CVE-2025-41696.md)
  `CVE-2025-41696` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Hard-coded credentials
- [Authenticated Denial-of-Service via Webshell](https://agentprime.io/advisories/CVE-2025-41694.md)
  `CVE-2025-41694` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Denial of service
- [Weak/Predictable root Password](https://agentprime.io/advisories/CVE-2025-41692.md)
  `CVE-2025-41692` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Shell access to UART Console](https://agentprime.io/advisories/CVE-2025-41697.md)
  `CVE-2025-41697` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-1299
- [Reflected XSS vulnerability in dyn_conn.php](https://agentprime.io/advisories/CVE-2025-41695.md)
  `CVE-2025-41695` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_portCntr2.php](https://agentprime.io/advisories/CVE-2025-41745.md)
  `CVE-2025-41745` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_portSecCfg.php](https://agentprime.io/advisories/CVE-2025-41746.md)
  `CVE-2025-41746` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_vlanIntfCfg.php](https://agentprime.io/advisories/CVE-2025-41747.md)
  `CVE-2025-41747` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_Dot1xCfg.php](https://agentprime.io/advisories/CVE-2025-41748.md)
  `CVE-2025-41748` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in port_util.php](https://agentprime.io/advisories/CVE-2025-41749.md)
  `CVE-2025-41749` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_PortCfg.php](https://agentprime.io/advisories/CVE-2025-41750.md)
  `CVE-2025-41750` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_portCntr.php](https://agentprime.io/advisories/CVE-2025-41751.md)
  `CVE-2025-41751` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Reflected XSS vulnerability in pxc_portSfp.php](https://agentprime.io/advisories/CVE-2025-41752.md)
  `CVE-2025-41752` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=phoenix-contact-fl-switch-2205>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/phoenix-contact-fl-switch-2205/>. Everything for agents: <https://agentprime.io/llms.txt>.