CVE-2025-41704mediumCWE-770

CVE-2025-41704: falha de média gravidade em Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP

Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar QUINT4-UPS/24DC/24DC/10/EIP+ Monitorar QUINT4-UPS/24DC/24DC/20/EIP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 1.6%
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Phoenix Contact · QUINT4-UPS/24DC/24DC/10/EIPPhoenix Contact · QUINT4-UPS/24DC/24DC/20/EIPPhoenix Contact · QUINT4-UPS/24DC/24DC/40/EIPPhoenix Contact · QUINT4-UPS/24DC/24DC/5/EIP
CVEs relacionadas — Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41706MEDIUMPhoenix Contact: Webserver Denial of Service through Malformed Content-LengthEPSS 1.7%CVE-2025-41707MEDIUMPhoenix Contact: WebSocket Handler Denial of ServiceEPSS 1.4%CVE-2025-41703HIGHPhoenix Contact: UPS Shutdown via Unauthenticated Modbus CommandEPSS 1.1%CVE-2025-41705MEDIUMPhoenix Contact: WebSocket Message Interception Leaks Webfrontend CredentialsEPSS 0.5%