Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Phoenix Contact
Fl Nat 2208

Phoenix Contact FL NAT 2208 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Phoenix Contact

23 CVEs

PC

Phoenix Contact FL NAT 2208 Vulnerabilities

CVE security advisories and vulnerability history for FL NAT 2208 by Phoenix Contact.

23

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.5

Avg CVSS

2020–2026

Last updated March 18, 2026

Overview

Phoenix Contact FL NAT 2208 has 23 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Phoenix Contact FL NAT 2208, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Phoenix Contact FL NAT 2208's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High13

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Phoenix Contact FL NAT 2208's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Phoenix Contact FL NAT 2208 CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Phoenix Contact FL NAT 2208 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

0.0.0 <= v < 3.5014 CVEs
0.0.0 <= v < 3.538 CVEs

Fixed in

3.5014 CVEs
3.538 CVEs

Find a version

23 CVEs

Sort

Cross‑Site Request Forgery in Link Aggregation Configuration
CVE-2026-22323
Patch
CWE-352
High · CVSS 7.1
EPSS 0.2% (7th pct)2026-03-18
Stored Cross‑Site Scripting in Link Aggregation Name Handling
CVE-2026-22322
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (17th pct)2026-03-18
Stack-Based Buffer Overflow in CLI Login Username Handling over CLI
CVE-2026-22321
Patch
CWE-121
Medium · CVSS 5.3
EPSS 0.4% (30th pct)2026-03-18
Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
CVE-2026-22320
Patch
CWE-121
Medium · CVSS 6.5
EPSS 0.3% (24th pct)2026-03-18
Stack-Based Buffer Overflow in File Install Parameter Handling
CVE-2026-22319
Patch
CWE-121
Medium · CVSS 4.9
EPSS 0.3% (27th pct)2026-03-18
Stack-Based Buffer Overflow in File Transfer Parameter Handling
CVE-2026-22318
Patch
CWE-121
Medium · CVSS 4.9
EPSS 0.3% (27th pct)2026-03-18
Command Injection Vulnerability in Root CA Certificate Transfer Workflow
CVE-2026-22317
Patch
CWE-77
High · CVSS 7.2
EPSS 1.0% (60th pct)2026-03-18
Buffer Overflow using TFTP Filename
CVE-2026-22316
Patch
CWE-121
Medium · CVSS 6.5
EPSS 0.4% (31th pct)2026-03-18
Authenticated Denial-of-Service via SSH
CVE-2025-41693
Patch
CWE-770
Medium · CVSS 4.3
EPSS 0.5% (41th pct)2025-12-09
Hardcoded User Password
CVE-2025-41696
Patch
CWE-798
Medium · CVSS 4.6
EPSS 0.2% (11th pct)2025-12-09
Authenticated Denial-of-Service via Webshell
CVE-2025-41694
Patch
CWE-770
Medium · CVSS 6.5
EPSS 0.5% (39th pct)2025-12-09
Weak/Predictable root Password
CVE-2025-41692
Patch
CWE-916
Medium · CVSS 6.8
EPSS 0.3% (21th pct)2025-12-09
Shell access to UART Console
CVE-2025-41697
Patch
CWE-1299
Medium · CVSS 6.8
EPSS 0.2% (14th pct)2025-12-09
Reflected XSS vulnerability in dyn_conn.php
CVE-2025-41695
Patch
CWE-79
High · CVSS 7.1
EPSS 0.7% (49th pct)2025-12-09
Reflected XSS vulnerability in pxc_portCntr2.php
CVE-2025-41745
Patch
CWE-79
High · CVSS 7.1
EPSS 0.7% (49th pct)2025-12-09
Reflected XSS vulnerability in pxc_portSecCfg.php
CVE-2025-41746
Patch
CWE-79
High · CVSS 7.1
EPSS 9.8% (95th pct)2025-12-09
Reflected XSS vulnerability in pxc_vlanIntfCfg.php
CVE-2025-41747
Patch
CWE-79
High · CVSS 7.1
EPSS 9.8% (95th pct)2025-12-09
Reflected XSS vulnerability in pxc_Dot1xCfg.php
CVE-2025-41748
Patch
CWE-79
High · CVSS 7.1
EPSS 9.8% (95th pct)2025-12-09
Reflected XSS vulnerability in port_util.php
CVE-2025-41749
Patch
CWE-79
High · CVSS 7.1
EPSS 0.7% (49th pct)2025-12-09
Reflected XSS vulnerability in pxc_PortCfg.php
CVE-2025-41750
Patch
CWE-79
High · CVSS 7.1
EPSS 9.8% (95th pct)2025-12-09
Reflected XSS vulnerability in pxc_portCntr.php
CVE-2025-41751
Patch
CWE-79
High · CVSS 7.1
EPSS 9.8% (95th pct)2025-12-09
Reflected XSS vulnerability in pxc_portSfp.php
CVE-2025-41752
Patch
CWE-79
High · CVSS 7.1
EPSS 9.8% (95th pct)2025-12-09
High vulnerability · 2020-02-18
CVE-2019-18352
Patch
High · CVSS 8.2
EPSS 0.4% (37th pct)2020-02-18

Common weakness types

The CWE weakness categories most often found in Phoenix Contact FL NAT 2208 CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-121Stack-based Buffer Overflow5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVE
CWE-352Cross-Site Request Forgery (CSRF)1 CVE
CWE-1299Missing Protection Mechanism for Alternate Hardware Interface1 CVE
CWE-798Use of Hard-coded Credentials1 CVE
CWE-916Use of Password Hash With Insufficient Computational Effort1 CVE

Disclosure activity by year

How many Phoenix Contact FL NAT 2208 CVEs were published each year.

2020

1

2025

14

2026

8

Other Phoenix Contact products

Browse vulnerabilities for other products by Phoenix Contact.

CHARX SEC-300052 CVEs CHARX SEC-305052 CVEs CHARX SEC-310052 CVEs CHARX SEC-315052 CVEs charx sec-3000 firmware29 CVEs charx sec-3050 firmware29 CVEs charx sec-3100 firmware29 CVEs charx sec-3150 firmware29 CVEs

All Phoenix Contact vulnerabilities

Frequently asked questions

Common questions about Phoenix Contact FL NAT 2208 vulnerabilities.

How many CVEs does Phoenix Contact FL NAT 2208 have?: Phoenix Contact FL NAT 2208 has 23 published CVE records since 2020.
How many Phoenix Contact FL NAT 2208 CVEs are in CISA KEV?: None of Phoenix Contact FL NAT 2208's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Phoenix Contact FL NAT 2208 vulnerabilities?: No Phoenix Contact FL NAT 2208 CVEs currently have a tracked public exploit in this dataset.
Which versions of Phoenix Contact FL NAT 2208 are affected?: 4 distinct Phoenix Contact FL NAT 2208 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Phoenix Contact FL NAT 2208 CVEs?: Phoenix Contact FL NAT 2208's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-121 (Stack-based Buffer Overflow), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
What is the average severity of Phoenix Contact FL NAT 2208 CVEs?: The average CVSS base score across Phoenix Contact FL NAT 2208's scored CVEs is 6.5.

References

All Phoenix Contact vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Phoenix Contact FL NAT 2208 vulnerabilities

Monitor new Phoenix Contact FL NAT 2208 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References