Skip to content
OpenAdvisories
High · 7.5 CVE-2025-41703 EUVD-2025-34150GHSA-gv4w-qrcx-c827

Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command

Published Oct 14, 2025 · Updated Nov 3, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: QUINT4-UPS/24DC/24DC/10/EIP Product: QUINT4-UPS/24DC/24DC/20/EIP Product: QUINT4-UPS/24DC/24DC/40/EIP Product: QUINT4-UPS/24DC/24DC/5/EIP Category: ICS / OT

Description

An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.

Affected products

VendorProductAffectedFixed
Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP VC:00 – ≤ VC:07 —
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP VC:00 – ≤ VC:07 —
Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP VC:00 – ≤ VC:07 —
Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP VC:00 – ≤ VC:07 —

Advisories 1

References