Reflected XSS vulnerability in pxc_portSecCfg.php

Summary

CVE	CVE-2025-41746
State	PUBLISHED
Assigner	CERTVDE
Source Priority	CVE Program / NVD first with legacy fallback
Published	2025-12-09 16:17:49 UTC
Updated	2026-09-30 20:10:00 UTC
Description	An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configuration parameters that are available in the context of the web application. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.

Risk And Classification

Primary CVSS: v3.1 7.1 HIGH from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS: 0.097650000 probability, percentile 0.953960000 (date 2026-10-02)

Problem Types: CWE-79 | CWE-79 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Secondary	7.1	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L`
3.1	CNA	CVSS	7.1	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Phoenixcontact	Fl Nat 2008	-	All	All	All
Operating System	Phoenixcontact	Fl Nat 2008 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Nat 2208	-	All	All	All
Operating System	Phoenixcontact	Fl Nat 2208 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Nat 2304-2gc-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Nat 2304-2gc-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2005	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2005 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2008	-	All	All	All
Hardware	Phoenixcontact	Fl Switch 2008f	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2008f Firmware	All	All	All	All
Operating System	Phoenixcontact	Fl Switch 2008 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2016	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2016 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2105	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2105 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2108	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2108 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2116	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2116 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2204-2tc-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2204-2tc-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2205	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2205 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206-2fx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206-2fx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206-2fx Sm	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206-2fx Sm Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206-2fx Sm St	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206-2fx Sm St Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206-2fx St	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206-2fx St Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206-2sfx Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206-2sfx Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2206c-2fx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2206c-2fx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2207-fx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2207-fx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2207-fx Sm	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2207-fx Sm Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2208	-	All	All	All
Hardware	Phoenixcontact	Fl Switch 2208c	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2208c Firmware	All	All	All	All
Operating System	Phoenixcontact	Fl Switch 2208 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2208 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2208 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2212-2tc-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2212-2tc-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2214-2fx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2214-2fx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2214-2fx Sm	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2214-2fx Sm Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2214-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2214-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2214-2sfx Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2214-2sfx Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2216	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2216 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2216 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2216 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2303-8sp1	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2303-8sp1	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2304-2gc-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2304-2gc-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2306-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2306-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2306-2sfp Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2306-2sfp Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2308	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2308 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2308 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2308 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2312-2gc-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2312-2gc-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2314-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2314-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2314-2sfp Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2314-2sfp Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2316	-	All	All	All
Hardware	Phoenixcontact	Fl Switch 2316/k1	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2316/k1 Firmware	All	All	All	All
Operating System	Phoenixcontact	Fl Switch 2316 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2316 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2316 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2404-2tc-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2404-2tc-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2406-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2406-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2406-2sfx Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2406-2sfx Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2408	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2408 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2408 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2408 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2412-2tc-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2412-2tc-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2414-2sfx	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2414-2sfx Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2414-2sfx Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2414-2sfx Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2416	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2416 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2416 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2416 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2504-2gc-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2504-2gc-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2506-2sfp	-	All	All	All
Hardware	Phoenixcontact	Fl Switch 2506-2sfp/k1	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2506-2sfp/k1 Firmware	All	All	All	All
Operating System	Phoenixcontact	Fl Switch 2506-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2506-2sfp Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2506-2sfp Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2508	-	All	All	All
Hardware	Phoenixcontact	Fl Switch 2508/k1	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2508/k1 Firmware	All	All	All	All
Operating System	Phoenixcontact	Fl Switch 2508 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2508 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2508 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2512-2gc-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2512-2gc-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2514-2sfp	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2514-2sfp Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2514-2sfp Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2514-2sfp Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2516	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2516 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2516 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2516 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2608	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2608 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2608 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2608 Pn Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2708	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2708 Firmware	All	All	All	All
Hardware	Phoenixcontact	Fl Switch 2708 Pn	-	All	All	All
Operating System	Phoenixcontact	Fl Switch 2708 Pn Firmware	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Phoenix Contact	FL SWITCH 2005	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2008	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2016	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2105	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2108	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2116	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2204-2TC-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2205	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206-2FX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206-2FX SM	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206-2FX SM ST	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206-2FX ST	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206-2SFX PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2206C-2FX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2207-FX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2207-FX SM	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2208	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2208 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2208C	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2212-2TC-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2214-2FX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2214-2FX SM	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2214-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2214-2SFX PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2216	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2216 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2304-2GC-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2306-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2306-2SFP PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2308	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2308 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2312-2GC-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2314-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2314-2SFP PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2316	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2316 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2404-2TC-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2406-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2406-2SFX PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2408	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2408 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2412-2TC-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2414-2SFX	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2414-2SFX PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2416	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2416 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2504-2GC-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2506-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2506-2SFP PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2508	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2508 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2512-2GC-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2514-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2514-2SFP PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2516	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2516 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2608	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2608 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2708	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2708 PN	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2303-8SP1	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL NAT 2008	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL NAT 2208	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL NAT 2304-2GC-2SFP	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2008F	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2316/K1	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2506-2SFP/K1	affected 0.0.0 3.50 semver	Not specified
CNA	Phoenix Contact	FL SWITCH 2508/K1	affected 0.0.0 3.50 semver	Not specified

References

Reference	Source	Link	Tags
certvde.com/de/advisories/VDE-2025-071	[email protected]	certvde.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube (en)

There are currently no legacy QID mappings associated with this CVE.