CVE-2025-41703highCWE-306

CVE-2025-41703: falha de alta gravidade em Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP

Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar QUINT4-UPS/24DC/24DC/10/EIP+ Monitorar QUINT4-UPS/24DC/24DC/20/EIP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.1%
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Phoenix Contact · QUINT4-UPS/24DC/24DC/10/EIPPhoenix Contact · QUINT4-UPS/24DC/24DC/20/EIPPhoenix Contact · QUINT4-UPS/24DC/24DC/40/EIPPhoenix Contact · QUINT4-UPS/24DC/24DC/5/EIP
CVEs relacionadas — Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41706MEDIUMPhoenix Contact: Webserver Denial of Service through Malformed Content-LengthEPSS 1.7%CVE-2025-41704MEDIUMPhoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function CodeEPSS 1.6%CVE-2025-41707MEDIUMPhoenix Contact: WebSocket Handler Denial of ServiceEPSS 1.4%CVE-2025-41705MEDIUMPhoenix Contact: WebSocket Message Interception Leaks Webfrontend CredentialsEPSS 0.5%