Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-41703

Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command

Description

An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP

Default version status: unaffected

  • VC:00 to ≤ VC:07affected

Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP

Default version status: unaffected

  • VC:00 to ≤ VC:07affected

Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP

Default version status: unaffected

  • VC:00 to ≤ VC:07affected

Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP

Default version status: unaffected

  • VC:00 to ≤ VC:07affected

References