CVE-2025-41705

Full vulnerability record from the local CVENow database.
Description

An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.
Severity
MEDIUM
CVSS score
6.8 (v3.1)
Vulnerability status
Deferred
Source identifier
[email protected]
Published
2025-10-14 08:15:35.650000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
  "id": "CVE-2025-41705",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-14T08:15:35.650",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto no autenticado (MitM) puede interceptar los mensajes websocket para obtener acceso a las credenciales de inicio de sesión para el Webfrontend."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Phoenix Contact",
          "product": "QUINT4-UPS/24DC/24DC/5/EIP",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "VC:00",
              "lessThan": "VC:07",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Phoenix Contact",
          "product": "QUINT4-UPS/24DC/24DC/10/EIP",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "VC:00",
              "lessThan": "VC:07",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Phoenix Contact",
          "product": "QUINT4-UPS/24DC/24DC/20/EIP",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "VC:00",
              "lessThan": "VC:07",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Phoenix Contact",
          "product": "QUINT4-UPS/24DC/24DC/40/EIP",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "VC:00",
              "lessThan": "VC:07",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-14T18:39:39.309928Z",
          "id": "CVE-2025-41705",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-523"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://certvde.com/de/advisories/VDE-2025-072",
      "source": "[email protected]"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2025/Oct/12",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}