Phoenix Contact Quint4 Ups/24Dc/24Dc/40/Eip vulnerabilities
5 vulnerabilities
Known vulnerabilities in Phoenix Contact Quint4 Ups/24Dc/24Dc/40/Eip, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-41705phoenix contactquint4-ups/24dc/24dc/10/eip+3
EPSS score0.46%
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.CVE-2025-41706phoenix contactquint4-ups/24dc/24dc/10/eip+3EPSS score1.67%
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.CVE-2025-41707phoenix contactquint4-ups/24dc/24dc/10/eip+3EPSS score1.41%
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.CVE-2025-41703phoenix contactquint4-ups/24dc/24dc/10/eip+3EPSS score1.05%
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.CVE-2025-41704phoenix contactquint4-ups/24dc/24dc/10/eip+3EPSS score1.59%
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.