PT-2025-37425 · Phoenix Contact · Fl Nat 2008+136

D. Blagojevic + 3 · Published 2025-09-14 · Updated 2025-12-09 · CVE-2025-41751

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ImageIO (affected versions not specified)

Description An issue exists in ImageIO that could allow for arbitrary code execution through maliciously crafted images. This issue was actively exploited. The vulnerability does not provide access to system-level resources or privileged functions, but allows execution of code via images. An estimated number of affected devices is not available. The session cookie is secured by the httpOnly Flag.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-41751

Affected Products

Fl Nat 2008

Fl Nat 2208

Fl Nat 2304-2Gc-2Sfp

Fl Switch 2005

Fl Switch 2008

Fl Switch 2008F

Fl Switch 2016

Fl Switch 2105

Fl Switch 2108

Fl Switch 2116

Fl Switch 2204-2Tc-2Sfx

Fl Switch 2205

Fl Switch 2206-2Fx

Fl Switch 2206-2Fx Sm

Fl Switch 2206-2Fx Sm St

Fl Switch 2206-2Fx St

Fl Switch 2206-2Sfx

Fl Switch 2206-2Sfx Pn

Fl Switch 2206C-2Fx

Fl Switch 2207-Fx

Fl Switch 2207-Fx Sm

Fl Switch 2208

Fl Switch 2208 Pn

Fl Switch 2208C

Fl Switch 2212-2Tc-2Sfx

Fl Switch 2214-2Fx

Fl Switch 2214-2Fx Sm

Fl Switch 2214-2Sfx

Fl Switch 2214-2Sfx Pn

Fl Switch 2216

Fl Switch 2216 Pn

Fl Switch 2303-8Sp1

Fl Switch 2304-2Gc-2Sfp

Fl Switch 2306-2Sfp

Fl Switch 2306-2Sfp Pn

Fl Switch 2308

Fl Switch 2308 Pn

Fl Switch 2312-2Gc-2Sfp

Fl Switch 2314-2Sfp

Fl Switch 2314-2Sfp Pn

Fl Switch 2316

Fl Switch 2316 Pn

Fl Switch 2316/K1

Fl Switch 2404-2Tc-2Sfx

Fl Switch 2406-2Sfx

Fl Switch 2406-2Sfx Pn

Fl Switch 2408

Fl Switch 2408 Pn

Fl Switch 2412-2Tc-2Sfx

Fl Switch 2414-2Sfx

Fl Switch 2414-2Sfx Pn

Fl Switch 2416

Fl Switch 2416 Pn

Fl Switch 2504-2Gc-2Sfp

Fl Switch 2506-2Sfp

Fl Switch 2506-2Sfp Pn

Fl Switch 2506-2Sfp/K1

Fl Switch 2508

Fl Switch 2508 Pn

Fl Switch 2508/K1

Fl Switch 2512-2Gc-2Sfp

Fl Switch 2514-2Sfp

Fl Switch 2514-2Sfp Pn

Fl Switch 2516

Fl Switch 2516 Pn

Fl Switch 2608

Fl Switch 2608 Pn

Fl Switch 2708

Fl Switch 2708 Pn

Fl Nat 2008 Firmware

Fl Nat 2208 Firmware

Fl Nat 2304-2Gc-2Sfp Firmware

Fl Switch 2005 Firmware

Fl Switch 2008 Firmware

Fl Switch 2008F Firmware

Fl Switch 2016 Firmware

Fl Switch 2105 Firmware

Fl Switch 2108 Firmware

Fl Switch 2116 Firmware

Fl Switch 2204-2Tc-2Sfx Firmware

Fl Switch 2205 Firmware

Fl Switch 2206-2Fx Firmware

Fl Switch 2206-2Fx Sm Firmware

Fl Switch 2206-2Fx Sm St Firmware

Fl Switch 2206-2Fx St Firmware

Fl Switch 2206-2Sfx Firmware

Fl Switch 2206-2Sfx Pn Firmware

Fl Switch 2206C-2Fx Firmware

Fl Switch 2207-Fx Firmware

Fl Switch 2207-Fx Sm Firmware

Fl Switch 2208 Firmware

Fl Switch 2208 Pn Firmware

Fl Switch 2208C Firmware

Fl Switch 2212-2Tc-2Sfx Firmware

Fl Switch 2214-2Fx Firmware

Fl Switch 2214-2Fx Sm Firmware

Fl Switch 2214-2Sfx Firmware

Fl Switch 2214-2Sfx Pn Firmware

Fl Switch 2216 Firmware

Fl Switch 2216 Pn Firmware

Fl Switch 2304-2Gc-2Sfp Firmware

Fl Switch 2306-2Sfp Firmware

Fl Switch 2306-2Sfp Pn Firmware

Fl Switch 2308 Firmware

Fl Switch 2308 Pn Firmware

Fl Switch 2312-2Gc-2Sfp Firmware

Fl Switch 2314-2Sfp Firmware

Fl Switch 2314-2Sfp Pn Firmware

Fl Switch 2316/K1 Firmware

Fl Switch 2316 Firmware

Fl Switch 2316 Pn Firmware

Fl Switch 2404-2Tc-2Sfx Firmware

Fl Switch 2406-2Sfx Firmware

Fl Switch 2406-2Sfx Pn Firmware

Fl Switch 2408 Firmware

Fl Switch 2408 Pn Firmware

Fl Switch 2412-2Tc-2Sfx Firmware

Fl Switch 2414-2Sfx Firmware

Fl Switch 2414-2Sfx Pn Firmware

Fl Switch 2416 Firmware

Fl Switch 2416 Pn Firmware

Fl Switch 2504-2Gc-2Sfp Firmware

Fl Switch 2506-2Sfp/K1 Firmware

Fl Switch 2506-2Sfp Firmware

Fl Switch 2506-2Sfp Pn Firmware

Fl Switch 2508/K1 Firmware

Fl Switch 2508 Firmware

Fl Switch 2508 Pn Firmware

Fl Switch 2512-2Gc-2Sfp Firmware

Fl Switch 2514-2Sfp Firmware

Fl Switch 2514-2Sfp Pn Firmware

Fl Switch 2516 Firmware

Fl Switch 2516 Pn Firmware

Fl Switch 2608 Firmware

Fl Switch 2608 Pn Firmware

Fl Switch 2708 Firmware

Fl Switch 2708 Pn Firmware

References · 6

• https://osv.dev/vulnerability/CVE-2025-41751 · Vendor Advisory
• https://certvde.com/de/advisories/VDE-2025-071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-41751 · Security Note
• https://twitter.com/grok/status/1967222605234270377 · Twitter Post
• https://twitter.com/CVEnew/status/1998355353428443422 · Twitter Post
• https://t.me/CVEtracker/39244 · Telegram Post