VulnSocial

CVE-2025-41695(phoenixcontact / fl_nat_2008)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.

phoenixcontact CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fl_nat_2008
  • fl_nat_2008_firmware
  • fl_nat_2208
  • fl_nat_2208_firmware

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
phoenixcontact
Products
fl_nat_2008fl_nat_2008_firmwarefl_nat_2208fl_nat_2208_firmwarefl_nat_2304-2gc-2sfpfl_nat_2304-2gc-2sfp_firmwarefl_switch_2005fl_switch_2005_firmwarefl_switch_2008fl_switch_2008_firmware

1 version affected across 137 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-07: 110-07
Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 HIGH: CVE-2025-41695 (CVSS 7.1) - XSS in dyn_conn.php allows unauthenticated attackers to manipulate WBM parameters via social engineering. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/mY54CGLEpB

    0000026
    144 followersView on X
CPE platform detail138 entries

138 of 138 entries

PartVendorProductVersionTarget SWTarget HW
HWphoenixcontactfl_nat_2008---
OSphoenixcontactfl_nat_2008_firmware---
HWphoenixcontactfl_nat_2208---
OSphoenixcontactfl_nat_2208_firmware---
HWphoenixcontactfl_nat_2304-2gc-2sfp---
OSphoenixcontactfl_nat_2304-2gc-2sfp_firmware---
HWphoenixcontactfl_switch_2005---
OSphoenixcontactfl_switch_2005_firmware---
HWphoenixcontactfl_switch_2008---
OSphoenixcontactfl_switch_2008_firmware---
HWphoenixcontactfl_switch_2008f---
OSphoenixcontactfl_switch_2008f_firmware---
HWphoenixcontactfl_switch_2016---
OSphoenixcontactfl_switch_2016_firmware---
HWphoenixcontactfl_switch_2105---
OSphoenixcontactfl_switch_2105_firmware---
HWphoenixcontactfl_switch_2108---
OSphoenixcontactfl_switch_2108_firmware---
HWphoenixcontactfl_switch_2116---
OSphoenixcontactfl_switch_2116_firmware---
HWphoenixcontactfl_switch_2204-2tc-2sfx---
OSphoenixcontactfl_switch_2204-2tc-2sfx_firmware---
HWphoenixcontactfl_switch_2205---
OSphoenixcontactfl_switch_2205_firmware---
HWphoenixcontactfl_switch_2206-2fx---
OSphoenixcontactfl_switch_2206-2fx_firmware---
HWphoenixcontactfl_switch_2206-2fx_sm---
OSphoenixcontactfl_switch_2206-2fx_sm_firmware---
HWphoenixcontactfl_switch_2206-2fx_sm_st---
OSphoenixcontactfl_switch_2206-2fx_sm_st_firmware---
HWphoenixcontactfl_switch_2206-2fx_st---
OSphoenixcontactfl_switch_2206-2fx_st_firmware---
HWphoenixcontactfl_switch_2206-2sfx---
OSphoenixcontactfl_switch_2206-2sfx_firmware---
HWphoenixcontactfl_switch_2206-2sfx_pn---
OSphoenixcontactfl_switch_2206-2sfx_pn_firmware---
HWphoenixcontactfl_switch_2206c-2fx---
OSphoenixcontactfl_switch_2206c-2fx_firmware---
HWphoenixcontactfl_switch_2207-fx---
OSphoenixcontactfl_switch_2207-fx_firmware---
HWphoenixcontactfl_switch_2207-fx_sm---
OSphoenixcontactfl_switch_2207-fx_sm_firmware---
HWphoenixcontactfl_switch_2208---
OSphoenixcontactfl_switch_2208_firmware---
HWphoenixcontactfl_switch_2208_pn---
OSphoenixcontactfl_switch_2208_pn_firmware---
HWphoenixcontactfl_switch_2208c---
OSphoenixcontactfl_switch_2208c_firmware---
HWphoenixcontactfl_switch_2212-2tc-2sfx---
OSphoenixcontactfl_switch_2212-2tc-2sfx_firmware---
HWphoenixcontactfl_switch_2214-2fx---
OSphoenixcontactfl_switch_2214-2fx_firmware---
HWphoenixcontactfl_switch_2214-2fx_sm---
OSphoenixcontactfl_switch_2214-2fx_sm_firmware---
HWphoenixcontactfl_switch_2214-2sfx---
OSphoenixcontactfl_switch_2214-2sfx_firmware---
HWphoenixcontactfl_switch_2214-2sfx_pn---
OSphoenixcontactfl_switch_2214-2sfx_pn_firmware---
HWphoenixcontactfl_switch_2216---
OSphoenixcontactfl_switch_2216_firmware---
HWphoenixcontactfl_switch_2216_pn---
OSphoenixcontactfl_switch_2216_pn_firmware---
OSphoenixcontactfl_switch_2303-8sp1---
HWphoenixcontactfl_switch_2303-8sp1---
HWphoenixcontactfl_switch_2304-2gc-2sfp---
OSphoenixcontactfl_switch_2304-2gc-2sfp_firmware---
HWphoenixcontactfl_switch_2306-2sfp---
OSphoenixcontactfl_switch_2306-2sfp_firmware---
HWphoenixcontactfl_switch_2306-2sfp_pn---
OSphoenixcontactfl_switch_2306-2sfp_pn_firmware---
HWphoenixcontactfl_switch_2308---
OSphoenixcontactfl_switch_2308_firmware---
HWphoenixcontactfl_switch_2308_pn---
OSphoenixcontactfl_switch_2308_pn_firmware---
HWphoenixcontactfl_switch_2312-2gc-2sfp---
OSphoenixcontactfl_switch_2312-2gc-2sfp_firmware---
HWphoenixcontactfl_switch_2314-2sfp---
OSphoenixcontactfl_switch_2314-2sfp_firmware---
HWphoenixcontactfl_switch_2314-2sfp_pn---
OSphoenixcontactfl_switch_2314-2sfp_pn_firmware---
HWphoenixcontactfl_switch_2316---
HWphoenixcontactfl_switch_2316\/k1---
OSphoenixcontactfl_switch_2316\/k1_firmware---
OSphoenixcontactfl_switch_2316_firmware---
HWphoenixcontactfl_switch_2316_pn---
OSphoenixcontactfl_switch_2316_pn_firmware---
HWphoenixcontactfl_switch_2404-2tc-2sfx---
OSphoenixcontactfl_switch_2404-2tc-2sfx_firmware---
HWphoenixcontactfl_switch_2406-2sfx---
OSphoenixcontactfl_switch_2406-2sfx_firmware---
HWphoenixcontactfl_switch_2406-2sfx_pn---
OSphoenixcontactfl_switch_2406-2sfx_pn_firmware---
HWphoenixcontactfl_switch_2408---
OSphoenixcontactfl_switch_2408_firmware---
HWphoenixcontactfl_switch_2408_pn---
OSphoenixcontactfl_switch_2408_pn_firmware---
HWphoenixcontactfl_switch_2412-2tc-2sfx---
OSphoenixcontactfl_switch_2412-2tc-2sfx_firmware---
HWphoenixcontactfl_switch_2414-2sfx---
OSphoenixcontactfl_switch_2414-2sfx_firmware---
HWphoenixcontactfl_switch_2414-2sfx_pn---
OSphoenixcontactfl_switch_2414-2sfx_pn_firmware---
HWphoenixcontactfl_switch_2416---
OSphoenixcontactfl_switch_2416_firmware---
HWphoenixcontactfl_switch_2416_pn---
OSphoenixcontactfl_switch_2416_pn_firmware---
HWphoenixcontactfl_switch_2504-2gc-2sfp---
OSphoenixcontactfl_switch_2504-2gc-2sfp_firmware---
HWphoenixcontactfl_switch_2506-2sfp---
HWphoenixcontactfl_switch_2506-2sfp\/k1---
OSphoenixcontactfl_switch_2506-2sfp\/k1_firmware---
OSphoenixcontactfl_switch_2506-2sfp_firmware---
HWphoenixcontactfl_switch_2506-2sfp_pn---
OSphoenixcontactfl_switch_2506-2sfp_pn_firmware---
HWphoenixcontactfl_switch_2508---
HWphoenixcontactfl_switch_2508\/k1---
OSphoenixcontactfl_switch_2508\/k1_firmware---
OSphoenixcontactfl_switch_2508_firmware---
HWphoenixcontactfl_switch_2508_pn---
OSphoenixcontactfl_switch_2508_pn_firmware---
HWphoenixcontactfl_switch_2512-2gc-2sfp---
OSphoenixcontactfl_switch_2512-2gc-2sfp_firmware---
HWphoenixcontactfl_switch_2514-2sfp---
OSphoenixcontactfl_switch_2514-2sfp_firmware---
HWphoenixcontactfl_switch_2514-2sfp_pn---
OSphoenixcontactfl_switch_2514-2sfp_pn_firmware---
HWphoenixcontactfl_switch_2516---
OSphoenixcontactfl_switch_2516_firmware---
HWphoenixcontactfl_switch_2516_pn---
OSphoenixcontactfl_switch_2516_pn_firmware---
HWphoenixcontactfl_switch_2608---
OSphoenixcontactfl_switch_2608_firmware---
HWphoenixcontactfl_switch_2608_pn---
OSphoenixcontactfl_switch_2608_pn_firmware---
HWphoenixcontactfl_switch_2708---
OSphoenixcontactfl_switch_2708_firmware---
HWphoenixcontactfl_switch_2708_pn---
OSphoenixcontactfl_switch_2708_pn_firmware---

Explore more

Back to dashboardphoenixcontact CVEsfl_nat_2008 vulnerabilities