Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 01:34.

1 Advisories gefunden

VDE-2025-072

Phoenix Contact: Security Advisory for QUINT4-UPS EIP

Phoenix Contact — QUINT4

Phoenix Contact PSIRThoch

Veröffentlicht

14. Oktober 2025

Letzte Aktualisierung

14. Oktober 2025

Betroffene Sektoren

Risk Evaluation

Multiple vulnerabilities were discovered in the firmware of QUINT4-UPS EIP devices that can be used by an unauthenticated remote attacker to perform Denial of Service attacks and to gather login credentials for the Webfrontend.

Zusammenfassung der Gegenmaßnahmen

This product was designed for use in closed industrial networks. Phoenix Contact strongly recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our [application note](https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf). In the industrial sector it is common practice to use Modbus/TCP without authentication.

Revisionshistorie (1)
  1. Erstveröffentlichung — 14. Oktober 2025

    Initial revision.

Offizielle Quelle: Phoenix Contact PSIRT