Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-41705 EUVD-2025-34146GHSA-99cx-g736-3whp

Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials

Published Oct 14, 2025 · Updated Nov 3, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: QUINT4-UPS/24DC/24DC/10/EIP Product: QUINT4-UPS/24DC/24DC/20/EIP Product: QUINT4-UPS/24DC/24DC/40/EIP Product: QUINT4-UPS/24DC/24DC/5/EIP Category: ICS / OT

Description

An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.

Affected products

VendorProductAffectedFixed
Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP VC:00 – < VC:07 VC:07
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP VC:00 – < VC:07 VC:07
Phoenix Contact QUINT4-UPS/24DC/24DC/20/EIP VC:00 – < VC:07 VC:07
Phoenix Contact QUINT4-UPS/24DC/24DC/40/EIP VC:00 – < VC:07 VC:07

Advisories 1

References