2032 matches found
CVE-2025-41704 Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality...
EUVD-2025-34149
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality...
CVE-2025-41704
CVE-2025-41704 describes an unauthenticated DoS against the Modbus service by sending a crafted function and sub-function code. Public sources constrain affected products to Phoenix Contact and related QUINT4 modules, with references indicating multiple QUINT4-UPS/24DC/24DC/5/EIP, 10/EIP, and 20/...
CVE-2025-41703 Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command...
EUVD-2025-34150
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command...
CVE-2025-41703 Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command...
CVE-2025-41703
CVE-2025-41703 affects Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP (UPS modules). An unauthenticated remote attacker can cause a Denial of Service by turning off the UPS output via Modbus command. Public sources describe an access/control weakness allowing UPS output shutdown, potentially disrupt...
Phoenix Contact’s various products have security vulnerabilities
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP and others are an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in a number of Phoenix Contact products. The vulnerability stems from the ability of an unauthenticated attacker to...
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP access control violation vulnerability
The Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP is an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. An access control error vulnerability exists in the Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP, which originates from an unauthenticated attacker being abl...
CVE-2025-41703: Missing Authentication for Critical Function
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command...
CVE-2025-41704: Allocation of Resources Without Limits or Throttling
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality...
PT-2025-41854
Name of the Vulnerable Software and Affected Versions Modbus affected versions not specified Description An unauthenticated remote attacker can cause a denial of service DoS condition affecting the Modbus service. This is achieved by sending a specific function and sub-function code. The core...
PT-2025-41853
Name of the Vulnerable Software and Affected Versions UPS affected versions not specified Description An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via a Modbus command. This disruption can lead to power outages or equipment shutdowns. The...
CVE-2025-53476
A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...
CVE-2025-53476
A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...
EUVD-2025-32856
A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...
CVE-2025-53476
OpenPLC_v3 is affected by CVE-2025-53476 due to a DoS in the ModbusTCP server. A crafted sequence of TCP connections can exhaust the server’s file descriptors, causing the server to be unable to process subsequent Modbus requests. TALOS details the vulnerability in OpenPLC_v3, including the waitF...
CVE-2025-53476
A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...
CVE-2025-53476
A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...