TI-2025-27670 CVE-2025-41707 · GHSA-c75x-9xmc-g626
Phoenix Contact: WebSocket Handler Denial of Service
Priority LOW 27
The websocket handler is vulnerable to a denial of service condition.
Vulnerabilities
4 records
Release: Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP, QUINT4-UPS/24DC/24DC/20/EIP and 2 more products VC:07 Clear all filters
TI-2025-27669 CVE-2025-41706 · GHSA-hvfm-qx34-wp84
Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
Priority LOW 27
The webserver is vulnerable to a denial of service condition.
TI-2025-27668 CVE-2025-41705 · GHSA-99cx-g736-3whp
Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
Priority LOW 30
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.
TI-2025-27667 CVE-2025-41704 · GHSA-qvxv-3qg9-53cr
Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
Priority LOW 27
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.