Quint4 Ups/24Dc/24Dc/40/Eip
Approved changes feed: RSS · Atom
cpe:2.3:a:phoenix_contact:quint4-ups/24dc/24dc/40/eip:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phoenix Contact (bcce83d0-b267-5887-ab90-2a4405e0861d) |
|---|---|
| Product | Quint4 Ups/24Dc/24Dc/40/Eip (d3aaa8c1-f9e5-5667-ba2b-984f4234c531) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41707 |
vulnerable | 2026-06-08 07:25:07.790233 |
Phoenix Contact: WebSocket Handler Denial of Service
MEDIUM (5.3)
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.
Published: 2025-10-14T08:06:11.424Z
Updated: 2025-11-03T17:44:49.327Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41706 |
vulnerable | 2026-06-08 07:25:07.789740 |
Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
MEDIUM (5.3)
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.
Published: 2025-10-14T08:05:56.266Z
Updated: 2025-11-03T17:44:48.379Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41705 |
vulnerable | 2026-06-08 07:25:07.789399 |
Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
MEDIUM (6.8)
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.
Published: 2025-10-14T08:05:43.031Z
Updated: 2025-11-03T17:44:47.442Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41704 |
vulnerable | 2026-06-08 07:25:07.788755 |
Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
MEDIUM (5.3)
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.
Published: 2025-10-14T08:05:34.171Z
Updated: 2025-11-03T17:44:46.483Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41703 |
vulnerable | 2026-06-08 07:25:07.788089 |
Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command
HIGH (7.5)
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.
Published: 2025-10-14T08:05:23.395Z
Updated: 2025-11-03T17:44:45.524Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.