Description
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP
Default version status: unaffected
VC:00 to < VC:07affected
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP
Default version status: unaffected
VC:00 to < VC:07affected
Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP
Default version status: unaffected
VC:00 to < VC:07affected
Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP
Default version status: unaffected
VC:00 to < VC:07affected