CVE-2025-41703

published 2025-10-14

CVE-2025-41703: An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
phoenix_contact	quint4-ups_24dc_24dc_10_eip	VC:00 – VC:07	—
phoenix_contact	quint4-ups_24dc_24dc_20_eip	VC:00 – VC:07	—
phoenix_contact	quint4-ups_24dc_24dc_40_eip	VC:00 – VC:07	—
phoenix_contact	quint4-ups_24dc_24dc_5_eip	VC:00 – VC:07	—

CWE-306