Description
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
Default version status: unaffected
VC:00 to < VC:07affected
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
Default version status: unaffected
VC:00 to < VC:07affected
Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP
Default version status: unaffected
VC:00 to < VC:07affected
Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP
Default version status: unaffected
VC:00 to < VC:07affected