What’s Vulnerable › Products

Phoenix Contact FL SWITCH 2303-8SP1 vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.

Check whether your Phoenix Contact FL SWITCH 2303-8SP1 version is affected

Latest Phoenix Contact FL SWITCH 2303-8SP1 vulnerabilities

CVE-2026-22323 — Cross‑Site Request Forgery in Link Aggregation Configuration (CVSS 7.1)
CVE-2026-22322 — Stored Cross‑Site Scripting in Link Aggregation Name Handling (CVSS 7.1)
CVE-2026-22321 — Stack-Based Buffer Overflow in CLI Login Username Handling over CLI (CVSS 5.3)
CVE-2026-22320 — Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI (CVSS 6.5)
CVE-2026-22319 — Stack-Based Buffer Overflow in File Install Parameter Handling (CVSS 4.9)
CVE-2026-22318 — Stack-Based Buffer Overflow in File Transfer Parameter Handling (CVSS 4.9)
CVE-2026-22317 — Command Injection Vulnerability in Root CA Certificate Transfer Workflow (CVSS 7.2)
CVE-2026-22316 — Buffer Overflow using TFTP Filename (CVSS 6.5)
CVE-2025-41752 — Reflected XSS vulnerability in pxc_portSfp.php (CVSS 7.1)
CVE-2025-41751 — Reflected XSS vulnerability in pxc_portCntr.php (CVSS 7.1)
CVE-2025-41750 — Reflected XSS vulnerability in pxc_PortCfg.php (CVSS 7.1)
CVE-2025-41749 — Reflected XSS vulnerability in port_util.php (CVSS 7.1)
CVE-2025-41748 — Reflected XSS vulnerability in pxc_Dot1xCfg.php (CVSS 7.1)
CVE-2025-41747 — Reflected XSS vulnerability in pxc_vlanIntfCfg.php (CVSS 7.1)
CVE-2025-41746 — Reflected XSS vulnerability in pxc_portSecCfg.php (CVSS 7.1)
CVE-2025-41745 — Reflected XSS vulnerability in pxc_portCntr2.php (CVSS 7.1)
CVE-2025-41697 — Shell access to UART Console (CVSS 6.8)
CVE-2025-41696 — Hardcoded User Password (CVSS 4.6)
CVE-2025-41695 — Reflected XSS vulnerability in dyn_conn.php (CVSS 7.1)
CVE-2025-41694 — Authenticated Denial-of-Service via Webshell (CVSS 6.5)
CVE-2025-41693 — Authenticated Denial-of-Service via SSH (CVSS 4.3)
CVE-2025-41692 — Weak/Predictable root Password (CVSS 6.8)