What’s Vulnerable › Products

Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP version is affected

Latest Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP vulnerabilities

• CVE-2025-41707 — Phoenix Contact: WebSocket Handler Denial of Service (CVSS 5.3)
• CVE-2025-41706 — Phoenix Contact: Webserver Denial of Service through Malformed Content-Length (CVSS 5.3)
• CVE-2025-41705 — Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials (CVSS 6.8)
• CVE-2025-41704 — Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code (CVSS 5.3)
• CVE-2025-41703 — Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command (CVSS 7.5)