Back to Database
Status published
Medium
CVE-2025-41707
Phoenix Contact: WebSocket Handler Denial of Service
Vulnerability Description
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41707
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
More from Phoenix Contact
View All →CVE-2025-41752
Reflected XSS vulnerability in pxc_portSfp.php
High
7.1
CVE-2025-41751
Reflected XSS vulnerability in pxc_portCntr.php
High
7.1
CVE-2025-41750
Reflected XSS vulnerability in pxc_PortCfg.php
High
7.1
CVE-2025-41749
Reflected XSS vulnerability in port_util.php
High
7.1
CVE-2025-41748
Reflected XSS vulnerability in pxc_Dot1xCfg.php
High
7.1
Affected Vendor
Phoenix Contact
View all reports →Affected Software
QUINT4-UPS/24DC/24DC/5/EIP, QUINT4-UPS/24DC/24DC/10/EIP, QUINT4-UPS/24DC/24DC/20/EIP, QUINT4-UPS/24DC/24DC/40/EIP
Vulnerable Versions:
VC:00
Timeline
Official Publish:
October 14th, 2025
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L