MEDIUM
Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
Published Oct 14, 2025
5.3
MEDIUMCVSS 3.1
EPSS 1.67%
Description
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.
Affected products
-
- Version VC:00StatusaffectedConstraints<VC:07
- Version
-
- Version VC:00StatusaffectedConstraints<VC:07
- Version
-
- Version VC:00StatusaffectedConstraints<VC:07
- Version
-
- Version VC:00StatusaffectedConstraints<VC:07
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Phoenix Contact | Quint4-Ups/24dc/24dc/10/eip | unaffected |
| ||||||
| Phoenix Contact | Quint4-Ups/24dc/24dc/20/eip | unaffected |
| ||||||
| Phoenix Contact | Quint4-Ups/24dc/24dc/40/eip | unaffected |
| ||||||
| Phoenix Contact | Quint4-Ups/24dc/24dc/5/eip | unaffected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner CERTVDE
Published Oct 14, 2025
Updated Nov 3, 2025
Reserved Apr 16, 2025
Link CVE-2025-41706
CISA Vulnrichment
Updated Oct 14, 2025
ENISA EUVD
EUVD-2025-34148 Assigner CERTVDE
Published Oct 14, 2025
Updated Nov 3, 2025
Exploited since n/a
Link EUVD-2025-34148