5.3
Moyenne
CVE-2025-41707 The websocket handler is vulnerable to a denial of service condition
Description
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| QUINT4-UPS/24DC/24DC/5/EIP | Versions non publiées | |
| QUINT4-UPS/24DC/24DC/10/EIP | Versions non publiées | |
| QUINT4-UPS/24DC/24DC/20/EIP | Versions non publiées | |
| QUINT4-UPS/24DC/24DC/40/EIP | Versions non publiées |
Autres CVE de QUINT4-UPS/24DC/24DC/5/EIP
Les 5 CVE de QUINT4-UPS/24DC/24DC/5/EIP →
CVE-2025-41706
The webserver is vulnerable to a denial of service condition
5.3
Moyenne
CVE-2025-41705
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials…
6.8
Moyenne
CVE-2025-41704
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and…
5.3
Moyenne
CVE-2025-41703
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command
7.5
Élevée