6.5
Medium
CVE-2025-41694 A low privileged remote attacker can run the webshell with an empty command containing whitespace
Description
A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FL SWITCH 2005 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2008 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2016 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2105 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2108 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2116 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2204-2TC-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2205 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2206-2FX 0.0 | 0.0.0 → < 3.50 | 3.50 |
Show the 60 other branches Hide the 60 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FL SWITCH 2206-2FX SM 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2206-2FX SM ST 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2206-2FX ST 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2206-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2206-2SFX PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2206C-2FX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2207-FX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2207-FX SM 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2208 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2208 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2208C 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2212-2TC-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2214-2FX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2214-2FX SM 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2214-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2214-2SFX PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2216 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2216 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2304-2GC-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2306-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2306-2SFP PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2308 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2308 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2312-2GC-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2314-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2314-2SFP PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2316 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2316 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2404-2TC-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2406-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2406-2SFX PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2408 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2408 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2412-2TC-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2414-2SFX 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2414-2SFX PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2416 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2416 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2504-2GC-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2506-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2506-2SFP PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2508 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2508 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2512-2GC-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2514-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2514-2SFP PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2516 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2516 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2608 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2608 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2708 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2708 PN 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2303-8SP1 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL NAT 2008 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL NAT 2208 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL NAT 2304-2GC-2SFP 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2008F 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2316/K1 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2506-2SFP/K1 0.0 | 0.0.0 → < 3.50 | 3.50 |
| FL SWITCH 2508/K1 0.0 | 0.0.0 → < 3.50 | 3.50 |
Other CVEs of FL SWITCH 2005
The 22 CVEs of FL SWITCH 2005 →
CVE-2026-22323
A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to…
7.1
High
CVE-2026-22322
A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an…
7.1
High
CVE-2026-22321
A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send…
5.3
Medium
CVE-2026-22320
A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with…
6.5
Medium