What’s Vulnerable › Products

Phoenixcontact Fl Switch 2404-2Tc-2Sfx Firmware vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Phoenixcontact Fl Switch 2404-2Tc-2Sfx Firmware version is affected

Latest Phoenixcontact Fl Switch 2404-2Tc-2Sfx Firmware vulnerabilities

• CVE-2025-41752 — Reflected XSS vulnerability in pxc_portSfp.php (CVSS 7.1)
• CVE-2025-41751 — Reflected XSS vulnerability in pxc_portCntr.php (CVSS 7.1)
• CVE-2025-41750 — Reflected XSS vulnerability in pxc_PortCfg.php (CVSS 7.1)
• CVE-2025-41749 — Reflected XSS vulnerability in port_util.php (CVSS 7.1)
• CVE-2025-41748 — Reflected XSS vulnerability in pxc_Dot1xCfg.php (CVSS 7.1)
• CVE-2025-41747 — Reflected XSS vulnerability in pxc_vlanIntfCfg.php (CVSS 7.1)
• CVE-2025-41746 — Reflected XSS vulnerability in pxc_portSecCfg.php (CVSS 7.1)
• CVE-2025-41745 — Reflected XSS vulnerability in pxc_portCntr2.php (CVSS 7.1)
• CVE-2025-41697 — Shell access to UART Console (CVSS 6.8)
• CVE-2025-41696 — Hardcoded User Password (CVSS 4.6)
• CVE-2025-41695 — Reflected XSS vulnerability in dyn_conn.php (CVSS 7.1)
• CVE-2025-41694 — Authenticated Denial-of-Service via Webshell (CVSS 6.5)
• CVE-2025-41693 — Authenticated Denial-of-Service via SSH (CVSS 4.3)
• CVE-2025-41692 — Weak/Predictable root Password (CVSS 6.8)
• CVE-2022-22509 — PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment (CVSS 8.8)