CNNVD-202510-2067 Information

CNNVD ID

CNNVD-202510-2067

CVE-2025-41706

  • CNNVD Published: 2025-10-14

Description (Chinese)

Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP是德国菲尼克斯电气(Phoenix Contact)公司的一款工业级直流不间断电源模块。 Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP存在安全漏洞,该漏洞源于远程攻击者可构造特制GET请求触发拒绝服务攻击。

Description (English)

Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP is an industrial-level uninterruptible direct power supply module of Phoenix Contact, Germany. Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP has a security loophole, which stems from the fact that long-range assailants can construct a specially designed GT request to trigger a service denial attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

菲尼克斯电气

Published

2025-10-14

Last Modified

2026-02-24

References

https://certvde.com/de/advisories/VDE-2025-072

Patch

https://www.phoenixcontact.com/global-search/search?q=QUINT4-UPS%2F24DC%2F24DC%2F10%2FEIP&_locale=zh-CN&_realm=cn

Share on: