WebSocket Handler Vulnerability in Vulnerable Product by Affected Vendor
CVE-2025-41707

5.3MEDIUM

Key Information:

Vendor

Phoenix Contact

Status
Quint4-ups/24dc/24dc/5/eip
Quint4-ups/24dc/24dc/10/eip
Quint4-ups/24dc/24dc/20/eip
Quint4-ups/24dc/24dc/40/eip
Vendor
CVE Published:
14 October 2025

What is CVE-2025-41707?

The WebSocket handler in the affected product is susceptible to a denial of service attack. An unauthenticated remote attacker can exploit this vulnerability by sending specifically crafted WebSocket messages, potentially disrupting the normal operation of the application without impacting its core functionality. Users of the affected product should take immediate action to mitigate this risk.

Affected Version(s)

QUINT4-UPS/24DC/24DC/10/EIP VC:00

QUINT4-UPS/24DC/24DC/20/EIP VC:00

QUINT4-UPS/24DC/24DC/40/EIP VC:00

References

https://certvde.com/de/advisories/VDE-2025-072

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
JSON
.
CVE-2025-41707 : WebSocket Handler Vulnerability in Vulnerable Product by Affected Vendor