CVE-2025-41706

The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - info@cert.vde.com

Published

2025-10-14

Last modified

2026-10-18

Weaknesses

CWE-120

Affected products

• Quint4-ups24dc24dc10eip (Phoenix Contact)
• Quint4-ups24dc24dc20eip (Phoenix Contact)
• Quint4-ups24dc24dc40eip (Phoenix Contact)
• Quint4-ups24dc24dc5eip (Phoenix Contact)

References

• https://certvde.com/de/advisories/VDE-2025-072
• http://seclists.org/fulldisclosure/2025/Oct/12