← CVE Intelligence

CVE-2025-41705

Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials PUBLISHED

Description (CNA)

An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.

Affected (CNA)

Vendor / productVersions
Phoenix Contact / QUINT4-UPS/24DC/24DC/5/EIPaffected VC:00 before VC:07
Phoenix Contact / QUINT4-UPS/24DC/24DC/10/EIPaffected VC:00 before VC:07
Phoenix Contact / QUINT4-UPS/24DC/24DC/20/EIPaffected VC:00 before VC:07
Phoenix Contact / QUINT4-UPS/24DC/24DC/40/EIPaffected VC:00 before VC:07

CWE

CWE-523

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.