Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

FL SWITCH 2005 — Vulnerabilities & Security Advisories 22

All 22 CVE vulnerabilities found in FL SWITCH 2005, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting the FL SWITCH 2005 industrial Ethernet switch manufactured by Moxa, categorized primarily by Common Weakness Enumeration tags. The collection encompasses a comprehensive history of disclosed flaws ranging from early firmware configuration errors to more recent remote code execution risks, covering the entire product lifecycle from its initial release to the present day. Users can utilize this resource to track the evolution of Moxa security advisories, understand the specific impact of particular weakness classes on industrial networking hardware, or review the complete vulnerability history of the FL SWITCH 2005 model. The data presented here serves as a factual reference for security professionals conducting risk assessments, enabling them to identify patterns in how this specific device has been targeted over time without relying on fragmented external sources. By centralizing these records, the page facilitates efficient analysis of exposure levels and helps organizations determine necessary remediation steps for legacy or currently deployed units. All entries are derived from official vendor announcements and verified third-party disclosures, ensuring accuracy while maintaining a neutral perspective on the severity and exploitability of each reported issue. This consolidated view supports proactive defense strategies by highlighting recurring themes in the device's security posture.

Vendor: Phoenix Contact

CVE ID Title CVSS Severity Published
CVE-2026-22323 Cross‑Site Request Forgery in Link Aggregation Configuration CWE-352 7.1 High 2026-03-18
CVE-2026-22322 Stored Cross‑Site Scripting in Link Aggregation Name Handling CWE-79 7.1 High 2026-03-18
CVE-2026-22321 Stack-Based Buffer Overflow in CLI Login Username Handling over CLI CWE-121 5.3 Medium 2026-03-18
CVE-2026-22320 Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI CWE-121 6.5 Medium 2026-03-18
CVE-2026-22319 Stack-Based Buffer Overflow in File Install Parameter Handling CWE-121 4.9 Medium 2026-03-18
CVE-2026-22318 Stack-Based Buffer Overflow in File Transfer Parameter Handling CWE-121 4.9 Medium 2026-03-18
CVE-2026-22317 Command Injection Vulnerability in Root CA Certificate Transfer Workflow CWE-77 7.2 High 2026-03-18
CVE-2026-22316 Buffer Overflow using TFTP Filename CWE-121 6.5 Medium 2026-03-18
CVE-2025-41693 Authenticated Denial-of-Service via SSH CWE-770 4.3 Medium 2025-12-09
CVE-2025-41696 Hardcoded User Password CWE-798 4.6 Medium 2025-12-09
CVE-2025-41694 Authenticated Denial-of-Service via Webshell CWE-770 6.5 Medium 2025-12-09
CVE-2025-41692 Weak/Predictable root Password CWE-916 6.8 Medium 2025-12-09
CVE-2025-41697 Shell access to UART Console CWE-1299 6.8 Medium 2025-12-09
CVE-2025-41695 Reflected XSS vulnerability in dyn_conn.php CWE-79 7.1 High 2025-12-09
CVE-2025-41745 Reflected XSS vulnerability in pxc_portCntr2.php CWE-79 7.1 High 2025-12-09
CVE-2025-41746 Reflected XSS vulnerability in pxc_portSecCfg.php CWE-79 7.1 High 2025-12-09
CVE-2025-41747 Reflected XSS vulnerability in pxc_vlanIntfCfg.php CWE-79 7.1 High 2025-12-09
CVE-2025-41748 Reflected XSS vulnerability in pxc_Dot1xCfg.php CWE-79 7.1 High 2025-12-09
CVE-2025-41749 Reflected XSS vulnerability in port_util.php CWE-79 7.1 High 2025-12-09
CVE-2025-41750 Reflected XSS vulnerability in pxc_PortCfg.php CWE-79 7.1 High 2025-12-09
CVE-2025-41751 Reflected XSS vulnerability in pxc_portCntr.php CWE-79 7.1 High 2025-12-09
CVE-2025-41752 Reflected XSS vulnerability in pxc_portSfp.php CWE-79 7.1 High 2025-12-09

All 22 known CVE vulnerabilities affecting FL SWITCH 2005 with full Chinese analysis, references, and POCs where available.