Skip to content

Known vulnerabilities in Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP

Is your version affected?

CVE Summary Score Published
CVE-2025-41707 The websocket handler is vulnerable to a denial of service condition 5.3 Medium Oct 14, 2025
CVE-2025-41706 The webserver is vulnerable to a denial of service condition 5.3 Medium Oct 14, 2025
CVE-2025-41705 An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials… 6.8 Medium Oct 14, 2025
CVE-2025-41704 An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and… 5.3 Medium Oct 14, 2025
CVE-2025-41703 An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command 7.5 High Oct 14, 2025

Other Phoenix Contact products