CVE-2025-41703 An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command

Description

An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.

Affected products and versions

Product	Affected versions	Fixed in
QUINT4-UPS/24DC/24DC/5/EIP	Versions not published
QUINT4-UPS/24DC/24DC/10/EIP	Versions not published
QUINT4-UPS/24DC/24DC/20/EIP	Versions not published
QUINT4-UPS/24DC/24DC/40/EIP	Versions not published

Other CVEs of QUINT4-UPS/24DC/24DC/5/EIP

The 5 CVEs of QUINT4-UPS/24DC/24DC/5/EIP →

CVE-2025-41707 The websocket handler is vulnerable to a denial of service condition 5.3 Medium CVE-2025-41706 The webserver is vulnerable to a denial of service condition 5.3 Medium CVE-2025-41705 An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials… 6.8 Medium CVE-2025-41704 An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and… 5.3 Medium