Phoenix Contact FL Switch 2508 vulnerabilities, page 2
22 vulnerabilities
Known vulnerabilities in Phoenix Contact FL Switch 2508, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-22321phoenix contactfl nat 2008+76
EPSS score0.38%
A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain unaffected, the impact is limited to a low‑severity availability disruption.CVE-2026-22319phoenix contactfl nat 2008+76EPSS score0.35%
A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal process, resulting in a DoS attack.