6.8
Medium
CVE-2025-41705 An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials…
Description
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QUINT4-UPS/24DC/24DC/5/EIP | Versions not published | |
| QUINT4-UPS/24DC/24DC/10/EIP | Versions not published | |
| QUINT4-UPS/24DC/24DC/20/EIP | Versions not published | |
| QUINT4-UPS/24DC/24DC/40/EIP | Versions not published |
Other CVEs of QUINT4-UPS/24DC/24DC/5/EIP
The 5 CVEs of QUINT4-UPS/24DC/24DC/5/EIP →
CVE-2025-41707
The websocket handler is vulnerable to a denial of service condition
5.3
Medium
CVE-2025-41706
The webserver is vulnerable to a denial of service condition
5.3
Medium
CVE-2025-41704
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and…
5.3
Medium
CVE-2025-41703
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command
7.5
High