5.3
Medium
CVE-2025-41706 The webserver is vulnerable to a denial of service condition
Description
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QUINT4-UPS/24DC/24DC/5/EIP | Versions not published | |
| QUINT4-UPS/24DC/24DC/10/EIP | Versions not published | |
| QUINT4-UPS/24DC/24DC/20/EIP | Versions not published | |
| QUINT4-UPS/24DC/24DC/40/EIP | Versions not published |
Other CVEs of QUINT4-UPS/24DC/24DC/5/EIP
The 5 CVEs of QUINT4-UPS/24DC/24DC/5/EIP →
CVE-2025-41707
The websocket handler is vulnerable to a denial of service condition
5.3
Medium
CVE-2025-41705
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials…
6.8
Medium
CVE-2025-41704
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and…
5.3
Medium
CVE-2025-41703
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command
7.5
High