Advisories · Technology

Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP.

Every CVE that names Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-41707 CVE record

CVSS 5.3 Medium

Phoenix Contact: WebSocket Handler Denial of Service
- Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
- Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-41706 CVE record

CVSS 5.3 Medium

Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
- Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
- Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-41705 CVE record

CVSS 6.8 Medium

Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
- Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
- Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
- CWE-523
Not analysed yet 14 Oct 2025
CVE-2025-41704 CVE record

CVSS 5.3 Medium

Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
- Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
- Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
- Denial of service
Not analysed yet 14 Oct 2025
CVE-2025-41703 CVE record

CVSS 7.5 High

Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command
- Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
- Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
- Authentication bypass
Not analysed yet 14 Oct 2025